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ABSTRACT 


In  this  thesis,  we  develop  a  Bayesian  updating  model  that  estimates  the  location 
and  time  of  a  chemical  attack  using  inputs  from  chemical  sensors  and  Atmospheric 
Threat  and  Dispersion  (ATD)  models.  In  bridging  the  critical  gap  between  raw  sensor 
data  and  threat  evaluation  and  prediction,  the  model  will  help  authorities  perform  better 
hazard  prediction  and  damage  control. 

The  model  is  evaluated  with  respect  to  settings  representing  real-world 
operations.  Factors  that  affect  the  model’s  capability  to  accurately  estimate  the  location 
and  time  of  an  attack  are  (i)  the  specific  layout  of  the  deployed  sensors  relative  to  the 
attack  location;  (ii)  the  number  of  false  positive  signals;  and  (iii)  the  number  of  false 
negative  errors.  An  experimental  design  is  used  to  evaluate  the  model  against  the  factors 
identified.  The  dominant  factor  is  the  Expected  Number  of  Correct  Signals  (ENCS), 
which  depends  on  the  specific  layout  of  the  deployed  sensors  relative  to  the  attack 
location.  Erom  analyzing  the  effect  of  sensitivity  (absence  of  false  negative  errors)  and 
specificity  (absence  of  false  positive  errors)  of  the  sensors  deployed,  we  conclude  that  it 
is  more  worthwhile  to  invest  in  sensitivity  than  specificity.  We  also  obtain  insights  on 
sensor  coverage. 
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EXECUTIVE  SUMMARY 


In  the  aftermath  of  the  catastrophic  events  of  September  11,  2001,  and  the 
international  anthrax  and  Sarin  nerve  gas  scare,  it  has  become  clear  that  no  reliable 
method  currently  exists  to  protect  ordinary  citizens  from  chemical  and  biological  agents 
that  are  dispersed  in  the  air.  The  challenge  involves  both  the  detection  and  identification 
of  possible  contamination  sources  in  the  shortest  time  possible.  Therefore,  a  goal  of 
paramount  importance  for  international  security  agencies  is  to  infer  in  near  real-time  the 
existence  of  an  air-contaminating  event;  to  determine  its  source  location  and  time  of 
release,  and  subsequently  to  respond  effectively  to  the  attack.  Sensor  systems  capable  of 
simultaneously  monitoring  the  concentrations  of  multiple,  related  air-borne  toxins  have 
been  and  are  continually  being  developed.  However,  there  are  only  very  few  methods  that 
are  capable  of  utilizing  sensor  information  in  real-time  for  identifying  the  source  and  time 
of  release  for  a  contamination  event.  (Bagtzoglou  et  ah,  2004) 

In  this  thesis,  we  develop  a  Bayesian  updating  model  that  estimates  the  location 
and  time  of  a  single  chemical  attack  using  inputs  from  chemical  sensors  and  Atmospheric 
Threat  and  Dispersion  (ATD)  models.  In  bridging  the  critical  gap  between  raw  sensor 
data  and  threat  evaluation  and  prediction,  the  model  will  help  authorities  perform  better 
hazard  prediction  and  damage  control. 

There  are  two  time  scales  used  in  the  model.  The  attack  time  scale,  denoted  by  the 
index  t,  represents  the  time  horizon  during  which  a  chemical  attack  can  be  detected.  This 
time  horizon  is  finite  and  we  assume  that  it  is  of  length  T.  The  detection  time  scale, 
denoted  by  the  index  u,  represents  the  current  time  in  which  updates  are  received  from 
the  sensors  and  probability  maps  are  generated.  The  attack  time  scale  runs  backwards 
relative  to  the  current  time  in  the  detection  time  scale. 

The  model  is  made  up  of  3  modules:  i)  a  physical  model,  ii)  a  sensor  model  and 
iii)  a  Bayesian  updating  model.  The  physical  model  serves  to  calculate  the  chemical 
concentration  c  at  the  location  of  sensor  s  due  to  an  attack  at  location  I,  t  time  periods 
ago.  Based  on  the  output  c  of  the  physical  model,  the  sensor  model  computes  the 
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probability  Pi\{c)  that  a  sensor  located  at  location  s  detects  a  chemical  attack  at  location 
I,  that  occurred  t  time  periods  ago.  The  Bayesian  updating  model  calculates  the 
probability  map  at  time  period  u,  ,  of  the  posterior  probability  of  a  chemical  attack  at 

location  /,  t  time  period  ago  after  an  observation  at  time  u.  A  high  value  of  at  time 

period  u  indicates  that  there  is  a  strong  likelihood  that  a  chemical  attack  occurred  at 
location  /,  t  time  periods  ago. 

The  model  is  implemented  and  evaluated  with  respect  to  settings  representing  real 
world  operations.  The  selected  alarm  criterion,  whereby  decision  makers  initiate  a 
response,  is  three  consecutive  time  periods  during  which  the  posterior  probabilities  a", 

are  above  the  alarm  threshold  of  0.7  for  a  particular  attack  at  location  /,  t  time  periods 
ago.  The  alarm  criterion  is  a  combination  of  a  probability  threshold  (0.7)  and  a 
persistence  measure  (3  consecutive  periods)  to  avoid  responding  erroneously  to  low 
posterior  probabilities  on  the  one  hand,  and  to  sudden  temporary  spikes  in  the  probability 
map  due  to  false  positive  errors,  on  the  other  hand. 

The  Measures  of  Effectiveness  (MOEs)  used  are: 

•  Accurately  identifying  the  source  location;  and 

•  Accurately  identifying  the  time  of  release. 

These  MOEs  are  chosen  due  to  their  impact  on  operations.  The  source  location 
and  time  of  release  serve  as  critical  inputs  to  threat  modeling  and  mitigation.  In 
evaluating  the  effectiveness  of  the  model  through  simulations,  a  success  is  declared  only 
if  both  MOEs  are  met,  that  is,  the  model  accurately  identifies  both  location  and  time  of 
the  attack.  Thus,  success  percentage  is  defined  as  the  percentage  of  simulation  trials  that 
produce  a  success  over  the  total  number  of  trials  performed. 

Eactors  that  affect  the  effectiveness  of  the  model  are  the  specific  layout  of  the 
deployed  sensors  relative  to  the  attack  location,  the  number  of  false  positive  errors  and 
the  number  of  false  negative  errors.  An  experimental  design  is  used  to  evaluate  the  effect 
of  each  factor. 


XIV 


Performing  linear  regression  on  the  simulation  results,  it  is  found  that  the 
dominant  faetor  is  the  speeifie  layout  of  the  deployed  sensors  relative  to  the  attaek 
loeation.  Also,  not  surprisingly,  we  obtain  that  false  negative  errors  have  higher  impaet 
on  the  sueeess  pereentage  than  false  positive  errors. 

We  demonstrate  that  given  a  deployment  of  16  AP4C  ehemieal  point  sensors,  a 
hypothesized  release  of  50kg  of  the  Sarin  (nerve  gas)  is  aecurately  identified  with  high 
probability  for  several  attaek  loeations.  The  model  bridges  the  eritieal  gap  between  input 
of  raw  sensor  data  and  the  operational  interpretation  of  these  data,  giving  authorities  the 
eapability  to  perform  better  hazard  prediction  and  damage  control. 

Insights  on  sensor  coverage  are  also  obtained  by  computing,  using  the  Pj\  values, 

the  probability  that  a  certain  attack  location  is  detected  by  at  least  one  sensor.  This 
probability  index  allows  decision  makers  and  planners  to  identify  both  vulnerable  areas 
and  areas  with  no  sensor  coverage.  For  example,  tradeoffs  between  coverage  (e.g., 
placing  sensors  downwind)  and  timeliness  (delayed  warnings)  could  be  explored. 

Future  research  involves  extending  the  model  to  (i)  detect  chemical  attacks  with 
different  nominal  attack  quantity  levels,  (ii)  detect  multiple  chemical  attacks  and  (iii) 
incorporate  different  sensor  types. 
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I.  INTRODUCTION 


Knowing  how  to  exploit  the  potential  of  teehnology  will  help  us  to  ereate 
new  solutions  to  deal  with  emerging  security  challenges.  The  increasing 
sophistication  of  IT  systems  now  makes  it  possible  to  conduct  complex 
analysis  of  massive  amounts  of  data.  Data  mining,  link-analysis 
technologies  and  sophisticated  intelligent  systems  can  help  to  provide  us 
with  early  indications  of  threats  and  opportunities. 


Professor  S.  Jayakumar, 
Deputy  Prime  Minister,  Coordinating  Minister  for  National  Security 
and  Minister  for  Law,  Singapore,  27  March  2007 


A,  BACKGROUND 

The  risk  of  a  chemical  attack  on  the  civilian  population  is  low  but  real.  In  1995, 
Aum  Shinrikyo,  a  Japanese  cult,  carried  out  a  chemical  attack,  using  Sarin  gas,  on  the 
Tokyo  subway  lines.  The  attack  killed  12  and  injured  over  3000  people,  of  which  some 
500  were  hospitalized.  Dealing  with  such  attacks  in  Singapore  requires  a  total  effort 
involving  several  Ministries,  as  well  as  the  private  sector  and  Singaporeans  at  large. 
(Rajah,  1995) 

To  minimize  the  damage  caused  by  a  chemical  attack  on  the  civilian  population, 
the  location  and  time  of  the  attack  are  needed  for  an  effective  response.  The  location  of 
the  attack  will  allow  first  responders  to  quickly  quench  the  source  in  accordance  to 
decontamination  procedures,  preventing  the  spread  of  the  chemical  agent.  Moreover,  the 
time  and  location  of  the  attack  are  critical  inputs  to  Atmospheric  Threat  Dispersion 
(ATD)  models  that  predict  the  spread  of  the  chemical  plume.  Information  on  the  spread 
of  the  chemical  plume  allows  security  and  defense  authorities  to  make  decisions  on  sites 
regarding  decontamination  and  preventing  cross-contamination,  and  to  provide  advice  to 
the  civilian  population  via  the  public  warning  system  to  undertake  appropriate  protective 
measures. 

In  the  event  of  a  covert  chemical  attack,  very  little  may  be  known  about  the 
source,  perhaps  not  even  its  location.  The  best  the  authorities  may  have  are  reports  of 

people  becoming  incapacitated,  the  existence  of  traffic  pile-ups  at  several  nearby 
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locations,  or  an  isolated  sensor  raising  an  alarm.  Such  an  undetected  attaek  will  delay 
actions  to  contain  the  chemieal  threat  and  provide  early  warning  to  the  publie.  Absent 
early  warning,  the  attaek  will  infliet  maximum  damage  leading  to  a  high  number  of 
easualties  and  a  large  area  of  ehemical  contamination.  Thus  it  is  crucial  to  be  able  to 
detect  the  attaek  as  soon  as  possible. 

Sensor  systems  eapable  of  simultaneously  monitoring  the  eoneentrations  of 
Chemieal,  Biological,  Radiology,  Nuclear  and  Explosive  (CBRNE)  threats  are  available 
and  continually  developed  eommereially.  However,  methods  that  are  eapable  of  utilizing 
the  sensor  information  in  real-time  for  identifying  the  source  and  time  of  release  for  a 
eontamination  event  are  in  a  research  stage.  Thus  there  are  no  eommereial  solutions 
available  to  the  operational  users  and  decision  makers  today.  Despite  the  millions  of 
dollars  that  are  spent  on  ehemieal  sensors  in  ehemieal  defense,  they  eurrently  only 
perform  the  role  of  detecting  and  monitoring  the  development  of  a  ehemieal  threat. 
Information  of  the  time  and  loeation  of  the  ehemieal  attaek  remains  largely  unknown. 

B,  PROBLEM  STATEMENT 

In  the  aftermath  of  the  eatastrophie  events  of  September  II,  2001  and  the 
international  anthrax  and  Sarin  nerve  gas  seare,  it  has  beeome  elear  that  no  reliable 
method  eurrently  exists  to  proteet  ordinary  eitizens  from  ehemieal  and  biologieal  agents 
that  are  dispersed  in  the  air.  The  ehallenge  involves  both  the  deteetion  and  identilieation 
of  possible  eontamination  sourees  in  the  shortest  time  possible.  Therefore,  a  goal  of 
paramount  importanee  for  security  and  response  agencies  is  to  infer  in  near  real-time  the 
existenee  of  an  air  eontaminating  event,  to  determine  its  source  loeation  and  time  of 
release,  and  subsequently  to  respond  effectively  to  the  attaek.  Sensor  systems  eapable  of 
simultaneously  monitoring  the  eoneentrations  of  multiple,  related  air-borne  toxins  have 
been  and  are  eontinually  being  developed.  However,  methods  that  are  eapable  of  utilizing 
the  sensor  information  in  real-time  for  identifying  the  source  and  time  of  release  for  a 
eontamination  event  do  not  exist.  (Bagtzoglou  et  ah,  2004) 

ATD  models  are  physieal  models  used  to  prediet  the  spread  of  a  eertain  chemieal 
attaek,  taking  into  aeeount  terrain  eharaeteristics  and  prevailing  meteorologieal 
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conditions.  These  models  are  used  to  perform  hazard  predietion  and  damage  assessment 
of  the  deteeted  threat  for  evaeuation  and  mitigation.  In  the  event  of  a  eovert  ehemieal 
attaek,  seeurity  and  defense  ministries  eannot  leverage  ATD  models  to  provide 
information  for  evaeuation  and  mitigation  strategies  beeause  the  information  on  the 
loeation  and  time  of  the  attaek  are  eritieal  inputs  of  the  models. 

In  this  thesis,  we  develop  a  model  that  estimates  the  loeation  and  time  of  a 
ehemieal  attaek  using  inputs  from  ehemieal  sensors  and  ATD  models.  In  bridging  the 
eritieal  gap  between  raw  sensor  data  and  threat  evaluation  and  predietion,  the  model  will 
help  authorities  perform  better  hazard  predietion  and  damage  eontrol. 

C.  APPROACH 

In  developing  a  model  for  determining  the  loeation  and  time  of  a  ehemieal 
release,  two  main  areas  of  uneertainty  need  to  be  addressed:  the  time-dependent  spatial 
distribution  of  the  ehemieal  plume  and  the  probability  of  deteeting  the  ehemieal  agent, 
given  that  the  plume  is  in  the  vieinity  of  the  sensors.  The  first  area  of  uneertainty  is 
affeeted  by  the  dispersion  eharaoteristies  of  the  souree,  the  terrain  of  the  area  of  interest, 
souree  loeation,  the  release  seenario  (eontinuous  or  explosion),  and  meteorologieal 
effeets.  In  this  thesis  we  are  only  eoneemed  with  the  souree  eharaeteristies  (type,  strength 
and  loeation),  with  the  terrain  ehosen  to  be  a  fiat  land.  The  seeond  area  of  uneertainty  is 
assoeiated  with  the  eapabilities  of  the  sensors  -  their  sensitivity  (avoiding  false  negative 
errors)  and  speeifieity  (avoiding  false  positive  errors). 

The  model  is  made  up  of  3  modules:  i)  a  physieal  model  that  deseribes  the 
dispersion  of  the  ehemieal  plume;  ii)  a  sensor  model  that  refleets  the  uneertainty 
assoeiated  with  sensor  signals;  and  iii)  a  Bayesian  updating  model  that  generates  a  multi¬ 
dimensional  probability  map  representing  the  likelihood  of  a  loeation  and  time  of  a  eovert 
ehemieal  attaek. 
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D,  SCOPE 

This  research  focuses  on  developing  a  model  for  detecting  the  occurrence  of  a 
chemical  attack  and  determining  its  location  and  time  of  release  from  sensor  data.  The 
research  questions  addressed  are: 

•  Can  we  use  a  Bayesian  updating  model  to  develop  a  probability  map  of 
the  location  and  time  of  a  covert  chemical  attack? 

•  How  sensitive  is  the  probability  map  with  respect  to  sensor  type,  location 
and  capabilities? 

E,  THESIS  OVERVIEW 

The  thesis  is  organized  as  follows: 

Chapter  II  reviews  the  various  approaches  used  to  develop  algorithms  for 
detecting  the  occurrence  of  a  chemical  attack,  and  determining  its  location,  release  rates 
and  agent  type  from  sensor  data.  The  strengths  and  weaknesses  of  the  approaches  are 
briefly  discussed.  Chapter  III  describes  the  development  of  the  model  and  its  three 
modules:  (i)  a  physical  (atmospheric)  model  of  plume  dispersion;  (ii)  a  sensor  model  that 
reflects  the  detection  capabilities  of  the  sensor;  and  (iii)  a  Bayesian  updating  model  that 
generates  the  probability  map.  Chapter  IV  present  tests  results  of  simulation  runs 
performed  for  evaluating  the  effectiveness  of  the  model  in  a  small  scale  scenario  in  order 
to  demonstrate  the  effectiveness  of  multiple  sensors.  The  small  scale  test  cases  also  serve 
as  a  preliminary  check  on  the  model  integrity  and  implementation.  Chapter  V  discusses 
the  evaluation  results  of  the  model  with  respect  to  large  scale  settings  that  depict  more 
closely  real-world  operations.  The  experimental  design  and  analysis  of  the  simulation 
runs  with  respect  to  the  Measures  of  Effectiveness  (MOEs)  are  also  discussed.  Chapter 
VI  draws  conclusions  relevant  to  the  research  questions  posed.  The  chapter  concludes  by 
suggesting  future  research  topics  and  extensions. 
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II.  LITERATURE  REVIEW 


In  this  chapter,  we  discuss  the  various  approaehes  used  to  develop  algorithms  for 
the  problem  of  deteeting  the  oeeurrenee  of  a  ehemieal  attaek  and  determining  its  loeation, 
release  rates,  time  of  release  and  agent  type  from  sensor  data.  This  problem  is  heneeforth 
ealled  “Chemieal  Souree  Isolation.”  The  strengths  and  weaknesses  of  the  approaehes  are 
also  diseussed. 

There  are  three  main  methods  for  solving  the  Chemieal  Souree  Isolation  problem; 
i)  Baekward  Approaeh,  ii)  Forward  Approaeh  and  hi)  Bayesian  probabilistie  modelling. 
We  review  these  methods  below. 

A,  BACKWARD  APPROACH 

In  the  Baekward  approaeh,  one  reverses  time  to  eome  up  with  estimates  of  the 
loeation  and  release  rates  of  a  ehemieal  attack  through  the  use  of  sensor  data  and  running 
an  ATD  model  baekwards  in  time.  The  advantage  of  this  approaeh  is  that  it  eliminates  the 
tedious  proeess  of  building  a  large  library  of  threat  scenarios.  The  disadvantages  are  that 
the  model  relies  on  simplifying  assumptions  that  are  not  neeessarily  met  in  reality. 
Furthermore,  inverse  models  are  eomputational  intensive  and  the  eomputational  burden  is 
eompounded  as  the  model  is  repeatedly  run  with  eaeh  new  deteetion  event  (Fry  et  ah, 
2005). 

B,  FORWARD  APPROACH 

In  the  Forward  approach,  one  guesses  the  loeation  and  strength  of  the  souree,  then 
uses  ATD  models  to  estimate  the  loeation  and  release  rates  of  a  ehemieal  attaek.  The 
estimates  are  then  eompared  to  aetual  sensor  alarms  and  a  series  of  mathematieal  and 
statistical  methods  are  applied  to  iterate  the  initial  guess.  This  eontinues  until  a  mateh  is 
aehieved  between  the  projeeted  and  actual  sensor  alarms.  A  shorteoming  of  this  approaeh 
is  that  many  runs  of  the  ATD  model  are  required.  This  shorteoming  is  overeome  by 
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building  a  comprehensive  pre-run  library  of  ATD  models.  However  scenarios  not 
represented  in  the  library  will  suffer  inaeeuraeies  due  to  extrapolation. 

Traditional  algorithms  for  data  interpretation  generally  attempt  to  fit  an  ATD 
model  to  measurements  of  airborne  pollutants.  The  fit  is  usually  aehieved  by  iteratively 
adjusting  model  input  parameters  until  they  reasonably  prediet  the  data.  For  real-time 
sensor  data  interpretation,  this  approaeh  is  too  slow  beeause  it  needs  to  exeeute 
eomputationally  intensive  ATD  models,  it  exeeutes  the  models  repeatedly  as  new  or 
sueeessive  sensor  data  beeome  available,  and  it  requires  a  considerable  amount  of  data 
before  the  algorithm  finds  a  unique  solution  or  estimates  the  uncertainty  in  the  ealibrated 
parameters.  Finally,  the  computational  burdens  required  by  the  forward  approaeh  ean  be 
so  great  that  using  it  for  pre-event  planning,  sueh  as  to  determine  optimal  monitoring 
loeations,  sampling  plans,  and  sensor  performanee  eriteria,  ean  be  exeessively 
eumbersome  (Sohn  et  ah,  2002). 

Many  of  these  problems  ean  be  solved  using  a  technique  called  Kalman  filtering. 
This  teehnique  is  well-suited  for  many  sensor  interpretation  applieations  and  has  been 
sueeessfully  applied,  for  example,  to  estimate  the  souree  strength  of  pollutant  releases  in 
multi-zone  buildings.  However,  Kalman  filtering  is  best  used  for  linear  systems  with  well 
conditioned  input-to-output  parameter  eovarianee  matriees  and  strong  observability 
between  the  internal-state  variables  (e.g.,  the  model  input  parameters  of  an  ATD  model) 
and  the  model  outputs  (e.g.,  eoneentration  predietions).  Many  ehemieal  kineties  and 
transport  phenomena,  sueh  as  seeond-order  pollutant  degradation,  density-driven 
pollutant  transport,  aerosol  coagulation,  and  second-order  pollutant  diffusion  in  sorption- 
desorption,  are  not  linear.  Furthermore,  wide  uneertainty  bounds  exist  for  several  of  the 
model  inputs,  sueh  as,  there  being  many  possible  source  loeations,  amounts  released, 
durations  of  releases,  and  meteorologieal  eonditions.  These  will  invariably  lead  to  ill- 
eonditioned  eovarianee  matriees  and  poorly  observable  systems.  Although  many 
nonlinear  models  may  be  linearized  using  an  extended  Kalman  filtering  technique,  the 
teehnique  requires  eonsiderable  tuning  and  adjustments  beeause  of  the  linear 
approximations  (Sohn  et  ah,  2002). 
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C.  BAYESIAN  PROBABLISTIC  MODELS 

Researchers  have  also  tried  to  develop  probabilistic  models  of  both  the  agent’s 
concentration  in  an  atmospheric  plume  and  the  sensor’s  capability  of  detecting  that  agent 
in  a  given  concentration.  The  probabilities  will  yield  the  likelihood  of  a  chemical  attack 
at  a  certain  location  and  the  agent  type  and  quantity  released.  The  advantage  of  this 
approach  is  that  it  captures  the  uncertainty  of  both  the  dispersion  characteristic  of  the 
chemical  threat  and  the  detection  characteristic  of  the  chemical  sensor,  thereby  providing 
a  more  realistic  representation  of  the  situation  and  a  better  solution  for  the  chemical 
source  isolation  problem. 

This  approach  is  used  by  the  UK‘s  Defense  Science  and  Technology  Laboratory 
and  is  intended  to  form  a  component  of  the  forthcoming  Nuclear,  Biological  and 
Chemical  Battlespace  Information  System  Application  (NBC  BISA).  The  NBC  BISA 
seeks  to  fuse  data  from  an  array  of  sensors  to  make  inference  about  the  possible  source 
locations,  times,  agent  types  and  masses  of  chemical  release  (Rapley  et  ah,  2005). 

The  probabilistic  atmospheric  dispersion  model  used  by  the  NBC  BISA  uses  a 
truncated  normal  distribution.  It  does  not  predict  the  actual  small  scale  detail  of  the 
dispersion  like  Gaussian  puff  and  other  ATD  models.  Rather,  it  calculates  the  statistical 
properties  of  the  dispersing  cloud.  The  sensor  model  used  by  the  NBC  BISA  is  developed 
for  a  generic  ion  mobility  detector  and  is  normally  distributed  with  a  measurement  error. 
Also  a  proportionality  constant  that  accounts  for  the  thermal  motion  of  the  electrons  in 
the  components  is  used  in  the  sensor  model  (Rapley  et  ah,  2005). 

D,  APPROACH  USED  IN  THIS  THESIS 

Taking  into  account  the  strengths  and  weaknesses  of  the  different  approaches 
available  from  the  literature,  this  thesis  uses  a  Bayesian  updating  model  to  develop  a 
multi-dimensional  probability  map  to  identify  the  location  and  time  of  a  chemical  attack. 
As  in  the  NBC  BISA  model,  we  apply  Bayes’s  Theorem  to  calculate  posterior 
probabilities;  however  the  prior  probabilities  are  calculated  differently.  The  development 
of  the  model  and  the  parameters  involved  are  discussed  in  Chapter  III. 
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III.  THE  MODEL 


We  use  a  Bayesian  updating  model  for  detecting  a  chemical  attack,  determining 
its  location  /  and  estimating  the  time  of  attack  t.  The  model  uses  data  obtained  from 
sensors  deployed  in  the  area  of  operations  monitoring  the  air  for  a  possible  chemical 
attack. 

A.  MODEL  DEVELOPMENT 

There  are  two  time  scales  used  in  the  model.  The  attack  time  scale,  denoted  by  the 
index  t,  represents  the  time  horizon  during  which  a  chemical  attack  can  be  detected.  We 
assume  that  this  time  horizon  is  of  length  T.  The  detection  time  scale,  denoted  by  the 
index  u,  represents  the  current  time  in  which  updates  are  received  from  the  sensors  and 
probability  maps  are  generated.  The  attack  time  scale  runs  backwards  relative  to  the 
current  time  in  the  detection  time  scale.  Both  scales  are  illustrated  in  Figure  1 . 


M=0  u=\  u=2 

Detection  time  _ I _ I _ I 


scale 

Attack  timescale  | 

relative  to  u  =1  ^ 

t=\  t= 

Attack  timescale 

0 

relative  to  u  =2  1 

t=\  t=0 


Figure  1 .  Attack  and  detection  time  scales 


As  time  progresses  along  the  u  scale,  the  t  scale  slides  along  with  it  such  that  the 
model  always  calculates  the  probability  of  an  occurrence  of  a  chemical  attack  up  to  T 
time  periods  before  the  current  time  u. 

The  model  is  developed  based  on  the  occurrence  of  two  events.  The  first  event, 
denoted  A^,  is  a  chemical  attack,  characterized  by  its  location  /  and  time  of  occurrence  t 
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time  periods  ago.  The  seeond  event,  denoted  A,  is  a  deteetion  of  a  ehemieal  attaek  by 
sensor  s,  out  of  a  set  of  sensors  S  that  are  deployed  to  monitor  ehemieal  attacks. 

In  the  model,  we  use  the  following  notation. 

Aij  -  An  event  that  a  chemical  attack  has  occurred  at  location  /,  t  time  periods  ago. 

£)“  -  An  event  that  sensor  5  5/gna A  a  detection  at  time  M. 

£)“  -  Complement  of  D“ . 

a'l  =  Initial  (a-priori)  probability  of  a  chemical  attack  at  location  /  at  time  period  u. 
(Absent  specific  intelligence  we  assume  that  V/,m  .  Also  note  that  these 

probabilities  are  defined  on  the  detection  time  scale.) 

^  u 

aij  =  Prior  probability  of  a  chemical  attack  at  location  /,  t  time  periods  ago  before  an 
observation  at  time  period  u. 

a" I  =  Posterior  probability  of  a  chemical  attack  at  location  /,  t  time  periods  ago  after 

observation  at  time  period  u. 

ps,u  _  pj-obability  that  a  sensor  located  at  location  s  detects  at  time  period  u  a  chemical 

attack  at  location  /  that  occurred  t  time  period  ago.  We  assume  stationary 
detection  capability,  that  is,  V  u  . 

\-q  =  Single-period  false  positive  probability:  the  probability  that  a  sensor  signals 

detection  given  there  is  no  attack  during  a  time  period. 

T  =  Time  horizon  for  detecting  an  attack.  (We  assume  that  there  is  at  most  one  attack 
during  any  time  horizon  T.) 

L  =  Number  of  locations  in  the  area  of  operations. 

The  parameters  ,  L,  T  and  1  -  ^  are  inputs  to  the  model. 

1.  Single  Sensor  Model 

We  start  with  a  model  only  involving  a  single  sensor  monitoring  a  set  of  L 
locations.  Thus,  we  suppress  the  index  5. 
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The  input  parameter  ,  whieh  is  the  a-priori  probability  of  a  ehemieal  attaek  at 
a  eertain  loeation  and  time  period,  is  determined  by  threat  and  vulnerability  studies  whieh 
are  beyond  the  seope  of  this  thesis. 

Consider  the  first  deteetion  time  period  u  =1.  The  prior  probabilities  of  an  attaek 
are  the  a-priori  probabilities.  That  is, 

^1  „ 

CCi^t  —  cc  \/  /,  t 


To  ealeulate  the  posterior  probabilities  a]^  ,  we  use  Bayes‘s  Theorem.  If  the 
sensor  signals  a  deteetion  at  w  =1,  then 


,  ,  P{& 


P{A^,\D')  =  a\,= 

/  t 

If  the  sensor  does  not  signal  a  detection  at  w  =1,  then 


/  t 


.—1 1 


PiA, 


D)  =  <  = 


,  P(D 


{\-Pi,)ai,t 


P{D) 


/  t 


I  t 


Hence, 


= 


Pi^ai,, 


S  Z  “  Z  Z 


/  t 


I  t 


{\-Pi,)ai,, 


X  Z  + ^(1  -  Z  Z 


if  o'  occurs,  yi,t 


if  D  occurs,  \/l,t 


I  t 


I  t 


At  u  =2, 

V/,t  =  l 
yi,t  =  2,...,T 


2 
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And  the  posterior  probabilities  are, 


a 


2 


_ _ 

Z  Z  ■  Z  Z  ) 

It  It 

_ (\-PuWl,t _ 

Z  Z  ■  ^ht ) + ^(1  -  Z  Z  ) 

^  It  It 


if  occurs,  yi,t 


if  D  occurs,\fl,t 


In  general, 

f«°  \/l,t=\ 

ai,t  =  \  , 

yi,t  =  2,...,T 


(1) 


^  u 

_ Pi,t(^i,‘ _ 

Z  Z  “  Z  Z 

It  It 

_ (\-pl,t)(^l‘ _ 

^^«L(i-^,,)+^(i-ZZ“'') 

It  It 


if  D“  occurs,  \fl  =  \,...,L,t  =  \,...,T 


- U 

if  D  occurs,  \/l  =  \,...,L,t  =  \,...,T 


(2) 


At  eaeh  time  step  u  the  values  of  generate  a  probability  map  that  gives  the 

most  updated  probabilities  of  an  attaek  at  loeation  /,  t  time  periods  ago.  At  eaeh  time  step, 
following  the  eue  from  the  sensor  (deteetion  or  non-deteetion)  the  probability  map  is 
updated.  An  alarm  goes  off  if  at  a  certain  point  u,  an  value  crosses  a  threshold, 
which  triggers  an  action  responding  to  the  detected  chemical  threat. 


2.  Multiple  Sensors  Model 

Now  we  extend  the  single  sensor  model  to  include  updates  from  multiple 
independent  sensors  used  to  monitor  a  set  of  L  locations.  As  for  the  single  sensor,  we  use 
Bayes  theorem  to  calculate  a]^  . 

If  all  the  sensors  return  a  detection  signal  at  w  =1,  then 
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,  P(D;  ...D,'U)P(A,^) 


/’(4,  A' 


p(d;...d:) 


/  t 


I  t 


If  none  of  the  sensors  returns  a  detection  signal  at  w  =1,  then 


—  1  —  1. 


P{\,  A  ...A)  =  <  = 


p{d!  ...Ds\a,)P{\,) 
P(A  ...A  ) 


ai 


ZZS,,,na--f;;,)+9‘(i-ZZS<..) 


/  t 


I  t 


If  the  sensor  readings  are  mixed,  so  that  sensors  1  to  n  record  a  detection,  and 

sensors  n+1  to  iS  do  not  record  a  detection  at  w  =1,  then 

-1  — 1 


,  P{D\...DlD^...D]UAPiA,) 


D\...Dl,Dn+\...Ds)  =  a\,  = 


- 1  - 1 


-1  - 1 


P{D\...D[,D,m...D,) 

5=1  5=n+l 


/  t  5=1  5=n+l 


/  t 


In  general,  «/,/  ,  the  prior  probability  at  time  step  u  for  an  attaek  at  loeation  I,  t 
time  periods  ago  is  shown  below 


aij  = 


\a  \/l,t  =  l 

a:A  v/,t  =  2,...,r 


(3) 


If  at  time  u,  sensors  l...n  produee  deteetion  ones  while  sensor  n+l...S  did  not, 
then  the  posterior  probability  is  defined  as  follows 
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^  u 


“l,  =■ 


5=1  5=n+l 


s  1 2".-  n  n  (1  -  /?,) + «"  (1  -  «)■  (1  - 1  s  s". ) 


/  t 


5=1  5=«+l 


/  t 


(4) 


Equations  3  and  4  are  computed  for  each  time  step  u,  based  on  the  sensor  cues  in 
that  time  step  and  the  prior  probabilities.  The  resulting  values  constitute  an  Z  X  T 

probability  map  at  time  period  u,  where  the  entry  ,  the  probability  at  time  step  u  of 

a  chemical  attack  at  location  /,  t  time  periods  ago  is  . 


B.  ESTIMATING  THE  VALUES  OF 

The  probability  that  a  sensor  located  at  location  s  detects  a  chemical  attack  at 
location  /  that  occurred  t  time  periods  ago,  represented  by  Pj,,  is  an  important  parameter 

in  the  model.  The  estimation  of  the  P,\  values  entails  the  use  of  a  physical  model  and  a 
sensor  model. 

Section  1  describes  the  physical  model  that  is  used  to  calculate  the  chemical 
concentration  at  the  sensor  location  from  a  chemical  attack  at  location  I  that  occurred  t 
time  periods  ago.  Section  2  describes  the  sensor  model  that  derives  the  probability  of 
detection  given  the  chemical  concentration  calculated  by  the  physical  model  in  section  1 . 

1,  Physical  Model 

The  probability  density  function  (PDF)  of  the  chemical  concentration  in  an 
atmospheric  plume  is  very  hard  to  determine.  Measurements  of  the  frequency  distribution 
of  fluctuating  plume  concentrations  have  revealed  that  the  PDF  is  generally  strongly 
skewed  to  the  right  with  an  upper  tail  that  is  heavier  than  that  of  the  Gaussian  form.  A 
large  number  of  mathematical  forms  have  been  used  to  model  the  concentration  PDF 
such  as  the  lognormal  distribution,  the  exponential  distribution,  the  truncated  normal 
distribution,  the  beta-Jacobi  distribution,  and  a  linear  combination  of  exponential  and 
generalized  Pareto  PDFs.  However,  despite  this  enormous  effort,  there  is  still  no  general 
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agreement  on  the  parametrie  PDF  model  that  provides  the  best  fit  to  plume  concentration 
data  over  a  wide  range  of  experimental  conditions  (Chan  et  ah,  1997). 

Hence,  due  to  the  difficulties  mentioned  above,  a  deterministic  physical  model  is 
used  instead  to  calculate  the  expected  temporal  and  spatial  concentration  of  a  chemical 
plume  resulting  from  a  chemical  attack. 

The  physical  model  consists  of  two  main  components:  (i)  the  source  emission 
model  and  (ii)  the  dispersion  model.  The  source  emission  model  serves  to  calculate  the 
initial  concentration  at  the  chemical  attack  location,  while  the  dispersion  model  calculates 
the  spread  of  the  chemical  agent,  taking  into  account  weather  and  terrain  characteristics. 
The  inputs  and  outputs  of  the  various  components  of  the  two  models  and  their 
relationships  are  depicted  in  Figure  2. 


Release  Type: 


Figure  2.  Components  of  the  physical  model 

For  this  study  the  Atmospheric  Threat  Dispersion  Model  are  the  Gaussian  Puff 
model  for  attacks  that  encompass  an  instantaneous  release,  and  the  steady  state  Gaussian 
Plume  model  for  continuous  releases.  Although  both  Gaussian  Models  are  reviewed,  only 
the  Gaussian  Puff  model  is  used  in  the  study.  The  source  emission  models  depend  on  the 
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chemical  agent  being  modeled  and  are  typically  classified.  In  this  study,  we  bypass  the 
source  emission  models  and  feed  a  release  amount  directly  to  the  ATD  model. 

a.  Gaussian  Puff  Model 

The  Gaussian  Puff  model  describes  the  temporal  and  spatial  concentration 
of  material  from  a  single  release  of  a  fixed  amount  of  material.  Figure  3  shows  the 
development  of  a  Gaussian  Puff  (Growl  et  ah,  2002). 


d  Dtrectjor" 


Figure  3.  Gaussian  Puff  development  over  time  [From:  Growl  et  ah,  2002] 


The  assumption  is  that  the  chemical  attack  is  expected  to  be  executed  at 
ground  level  (z=0)  and  the  sensors  are  also  placed  on  the  ground,  hence  the  Gaussian  Puff 
model  equations  can  be  simplified  as  follows  (Growl  et  ah,  2002). 


C(x,y,0,0  = 


Q* 


exp 


^  x-wt  ' 


cr^ 


+ 


T 


(5) 


-5 

where  :  C  is  the  concentration  in  mg/m 

X  is  the  distance  away  from  the  source  in  the  x-coordinate  in  meters; 
y  is  the  distance  away  from  the  source  in  the  y-coordinate  in  meters; 

is  the  amount  of  chemical  released  in  mg/m  ; 
w  is  the  wind  speed  in  the  direction  of  the  x-coordinate  in  meters/second 
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t  is  the  time,  in  seeonds,  sinee  the  ehemieal  release;  and 

(j^,(jy,(j^,  are  the  Pasquill  Gifford  (PG)  dispersion  eoeffieients  for  puff 
dispersion. 

Equation  5  ean  also  be  used  to  ealeulate  the  temporal  eoneentration  of 
material  from  a  single  release  of  a  fixed  amount  of  material  even  when  the  prevailing 
wind  direetion  is  not  in  the  direetion  of  the  x-eoordinate  of  the  area  eells.  This  is  aehieved 
via  a  transformation  of  the  eoordinate  systems. 

The  PG  dispersion  eoeffieients  are  funetions  of  the  atmospherie  eonditions 
and  the  distanee  downwind  from  the  release  point.  The  atmospherie  eonditions  are 
elassilied  aeeording  to  six  different  stability  elasses  shown  in  Table  1.  The  stability  elass 
depends  on  wind  speed  and  quantity  of  sunlight.  During  the  day,  inereased  wind  speed 
results  in  greater  atmospherie  stability  whereas  at  night  the  reverse  is  true.  This  differenee 
is  due  to  a  ehange  in  vertieal  temperature  profiles  from  day  to  night  (Growl  et  ah,  2002). 


Table  1.  PG  stability  elasses  [From:  Growl  et  ah,  2002] 


Surfaee  wind 

Day-time  Insolation 

Night-time  eonditions 

speed  (m/s) 

Strong 

Moderate 

Slight 

Thin  overeast 

Gloudy 

<2 

A 

A-B 

B 

F 

F 

2-3 

A-B 

B 

G 

E 

F 

3-4 

B 

B-G 

G 

D 

E 

4-6 

G 

G-D 

D 

D 

D 

>6 

G 

D 

D 

D 

D 

The  equations  for  PG  dispersion  Goeffieients  for  Puff  Dispersion  with  x  as 
the  distanee  away  from  the  souree  in  the  x-eoordinate  in  meters  are  as  shown  in  Table  2 
(Growl  et  ah,  2002). 
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Table  2.  Recommended  functions  for  PG  dispersion  Coefficients  [From;  Crowl  et 

al.,  2002] 


PG  stability  class 

cr^ ,  (jy  (meters) 

cr^  (meters) 

A 

0.1 

0.60x"-'^ 

B 

O.SSx"'-" 

C 

0.1  Ox"'"" 

0.34x"-'' 

D 

O.Obx"'"" 

0.15x"™ 

E 

O.Odx"'"" 

0.10x"“ 

F 

0.02X""'" 

0.05x""‘ 

Equation  5,  together  with  Tables  1  and  2  facilitate  the  calculation  of  the 
concentration  of  the  chemical  at  every  location  in  the  area  of  operations. 

b.  Gaussian  Plume  Model 

A  Gaussian  Plume  model  represents  the  plume  diffusion  in  a  continuous 
release  for  a  range  of  atmospheric  conditions.  The  technique  applies  the  standard 
deviations  of  the  Gaussian  distribution  in  two  directions  to  represent  the  characteristics  of 
the  plume  downwind  of  its  origin.  The  plume’s  shape,  and  hence  the  standard  deviations, 
varies  according  to  the  specific  meteorological  conditions  (Liu,  1997). 

A  number  of  assumptions  are  typically  used  for  Gaussian  modeling  of  a 
plume.  First,  the  analysis  assumes  a  steady  state  system  (i.e.,  a  source  continuously  emits 
at  a  constant  strength,  the  wind  speed,  direction,  and  diffusion  characteristics  of  the 
plume  remain  steady,  and  no  chemical  transformations  take  place  in  the  plume).  Second, 
diffusion  in  the  x  direction  is  ignored,  although  transport  in  this  direction  is  accounted  for 
by  wind  speed.  Third,  the  plume  is  reflected  up  at  the  ground  rather  than  being  deposited, 
according  to  the  rules  of  conservation  of  matter  (i.e.,  none  of  the  pollutant  is  removed 
from  the  plume  as  it  moves  downwind).  Fourth,  the  model  applies  to  an  ideal  aerosol  or 
an  inert  gas.  Particles  greater  than  20  mm  in  diameter  tend  to  settle  out  of  the  atmosphere 
at  an  appreciable  rate  (Liu,  1997). 

For  the  concentrations  at  ground  level,  z  can  be  set  equal  to  zero  and  if  the 
emission  source  is  located  at  ground  level  with  no  effective  plume  rise,  the  steady  state 
Gaussian  plume  equation  is  as  follows  (Liu,  1997)  ; 
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C(x,j,0)  =  — ^ — exp 

ncjMw 

y  ^ 

■> 

where  ;  C  is  the  coneentration  in  mg/m  ; 

X  is  the  distance  away  from  the  source  in  the  x-coordinate  in  meters; 
y  is  the  distance  away  from  the  source  in  the  y-coordinate  in  meters; 

is  the  amount  of  chemical  released  in  mg/m  s; 
w  is  the  wind  speed  in  the  direction  of  the  x-coordinate  in  meters/second; 
,  are  PG  dispersion  coefficients  for  plume  dispersion. 


2 

1 

i  — 

2 

1  cr  j 

V  y  J 

(6) 


The  recommended  PG  dispersion  coefficients  for  plume  dispersion  are 
shown  in  Table  3,  where  x  is  the  distance  away  from  the  source  in  the  x-coordinate  in 
meters  Growl  et  ah,  2002). 


Table  3.  Recommended  PG  plume  dispersion  coefficients  [From;  Growl  et  ah, 

2002] 


PG  stability  class 

(meters) 

cr^  (meters) 

A 

0.22x(l+0.0001x)-‘'" 

0.20x 

B 

0.16x(l+ 0.000  lx)-*'" 

0.12x 

G 

0.11x(l+ 0.000  lx)-*'" 

0.08x(l+0.0002x)-‘'" 

D 

0.08x(l+0.0001x)-''" 

0.06x(l+0.0015x)-‘'" 

E 

0.06x(l+0.0001x)-‘'" 

0.03x(l+  0.0003x)-' 

E 

0.04x(l+0.0001x)-‘'" 

0.016x(l+0.0003x)'‘ 

Equation  6,  together  with  the  stability  class  for  the  attack  scenario  and  its 
corresponding  PG  dispersion  coefficients  for  varying  distances  from  the  chemical  source, 
lets  us  calculate  the  concentration  of  the  chemical  at  every  location  in  the  area  of 
operations. 

2,  Sensor  Model 

The  Gaussian  puff  and  plume  models  described  in  section  1  provide  techniques 
for  calculating  the  chemical  concentration  at  a  certain  point  relative  to  the  release  point. 
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To  calculate  the  values  of  we  need  to  develop  a  model  that  eaptures  the  detection 

performance  characteristics  of  a  sensor.  Specifically,  the  sensor  model  caleulates  the 
probability  that  a  sensor  will  deteet  a  ehemieal  release  at  a  given  eoneentration. 

In  order  to  develop  a  probabilistic  model  of  the  sensor’s  capability  to  detect  a 
chemical  threat,  the  modeler  must  have  a  good  grasp  of  the  detection  technology  used,  as 
well  as  have  aecess  to  deteetion  data  obtained  from  laboratory  trials.  For  example,  ion 
mobility-based  sensors  have  an  upper  alarm  threshold,  beyond  whieh  they  eannot  indieate 
the  presenee  of  a  higher  eoneentration  due  to  a  limiting  ionizing  eapability  of  the  sensor. 
Sensor  model  parameters  are  usually  elassified  information  as  they  reveal  the  sensor’s 
deteetion  effeetiveness  and  henee  strength  and  vulnerabilities  of  the  defender. 

Next,  we  develop  two  different  sensor  models;  a  cookie  eutter  model  and  a 
continuous  model.  For  a  given  agent,  a  sensor  model  determines  the  probability  F’'(c)of 
sensor  s  detecting  the  agent  at  concentration  c.  If,  following  a  release  at  loeation  I,  t  time 
periods  ago,  the  eoneentration  of  the  agent  at  the  location  of  sensor  s  is  ,  then 

Pi,  =  P'{c,,)  .  The  values  of  c',,  are  obtained  from  the  physical  model. 
a.  Cookie  Cutter  Model 


According  to  the  cookie  eutter  model,  the  value  of  P\c)  is  given  by 


P\c) 


if  c>dt 
otherwise 


(V) 


The  detection  threshold  dt  is  obtained  from  the  teehnical  specifications  of 
the  sensor  being  modeled.  As  before,  1  -  ^  is  the  false  positive  probability.  In  this  thesis 
the  sensor  modeled  is  the  AP4C  ehemieal  warfare  agent  deteetor  manufaetured  by 
Proengin  (Proengin,  2009).  The  values  of  dt  for  the  AP4C  sensor,  with  respeet  to  three 
different  classes  of  ehemieal  agents,  are  given  in  Table  4. 
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Table  4. 


Detection  thresholds  for  the  AP4C  sensor  [From;  Proengin,  2009] 


Agent  Type 

Nerve 

Blister 

Blood 

Detection  Threshold  (mg/m  ) 

0.01 

1.5 

10 

Chemical  agents  are  typically  classified  into  nerve,  blister  or  blood  agents, 
in  accordance  to  the  way  that  they  affect  the  human  body.  Nerve  agents  are  a  class  of 
organophosphates  that  disrupt  the  mechanism  by  which  nerves  transfer  messages  to 
organs.  Poisoning  by  a  nerve  agent  leads  to  convulsions  and  eventual  death  by 
asphyxiation  as  control  is  lost  over  respiratory  muscles.  Blister  agents  consist  of  either 
nitrogen-based,  or  sulphur-based  mustards,  and  Lewisites  (organoarsenic  compounds). 
They  cause  severe  chemical  burns,  resulting  in  large,  painful  water  blisters  on  the  bodies 
of  those  affected.  Blood  agents  are  a  class  of  chemicals  containing  cyanide  or  arsenic. 
They  cause  death  through  respiratory  failure  by  blocking  the  blood’s  ability  to  deliver 
oxygen  to  body  tissues. 

The  cookie  cutter  sensor  model  is  a  simplistic  model  which  gives  a  rough 
representation  of  the  sensor’s  capabilities.  However  this  model  can  be  used  as  a 
reasonable  approximation  if  detailed  information  of  the  detection  performance  of  the 
sensor  is  not  available.  Most  of  the  time,  the  only  available  information  of  the  sensor’s 
detection  capability  is  its  detection  threshold  which  is  used  in  the  cookie  cutter  model. 
Further  in-house  laboratory  trials  are  required  to  assess  the  sensor’s  detection  capabilities 
across  various  concentration  and  environmental  ranges. 

b.  Continuous  Model 

In  a  continuous  sensor  model  F’'(c)is  a  continuous  function  of  c.  For  the 
AP4C  chemical  sensor  the  continuous  function  is  approximated  by  six  ranges,  or  alarm 
thresholds,  called  bars.  A  bar  is  an  indicator  alarm  on  the  AP4C  detector  that  indicates 
the  concentration  of  the  agent  detected.  Table  5  presents  these  alarm  thresholds  for  the 
three  types  of  agents — ^Nerve,  Blister  and  Blood. 
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Table  5.  Alarm  thresholds  in  mg/m^  of  the  AP4C  sensor  [From;  Proengin,  2009] 


Alarm  Thresholds 

Agent  Type 

Nerve 

Blister 

Blood 

1  bar 

0.01 

1.5 

10 

2  bar 

0.125 

2 

30 

3  bar 

0.5 

4 

50 

4  bar 

2 

10 

100 

5  bar 

7.5 

25 

200 

5  bar  flashing 

30 

50 

500 

The  detection  technology  of  the  AP4C  sensor  is  flame  spectrophotometry. 
The  chemical  agent  is  detected  by  analyzing  the  light  spectrum  created  by  burning  the 
gas.  Quantification  is  achieved  by  measuring  the  amplitude  of  the  relevant  peaks.  The 
sensor’s  response  is  linear  below  the  saturation  point  where  the  detector  burning  capacity 
is  reached,  as  reflected  by  the  5  bar  flashing  threshold. 


Hence,  for  the  AP4C  sensor,  P\c)  is  equal  to  1  if  the  chemical 
concentration  c  is  equal  to  or  exceeds  the  alarm  threshold  of  5  bars  blinking.  P'{c) 


decreases  by  0.1  across  the  lower  alarm  thresholds  until  the  detection  threshold  of  one  bar 


is  reached,  after  which  T’'(c) equals  \-q,  the  false  positive  probability.  This  relationship 


is  summarized  below. 


1 

if  c>  alarm  threshold 

0.9 

if  c>  alarm  threshold 

0.8 

if  c>  alarm  threshold 

0.7 

if  c>  alarm  threshold 

0.6 

if  c>  alarm  threshold 

0.5 

if  c>  alarm  threshold 

\-q 

otherwise 

of  5  bar  blinking 

of  5  bars  and  <  5  bars  blinking 

of  4  bars  and  <  5  bars 

of  3  bars  and  <  4  bars 

of  2  bars  and  <  3  bars 

of  1  bar  and  <  2  bars 


The  continuous  sensor  model  gives  a  better  resolution  to  the  probability  of 
detection  then  the  cookie  cutter  sensor.  However  a  comprehensive  understanding  of  the 
sensor’s  principles  of  operation  as  well  as  detailed  laboratory  trial  results  are  needed  to 
obtain  this  more  refined  formulation. 


22 


3,  Summary  of  the  Detection  Model 


The  detection  model  is  made  up  of  3  modules:  i)  a  physical  model;  ii)  a  sensor 
model;  and  hi)  a  Bayesian  updating  model  .  The  physical  model  serves  to  calculate  the 
chemical  concentration  c  at  the  location  of  sensor  s  due  to  an  attack  at  location  I,  t  time 
periods  ago.  Based  on  the  output  c  of  the  physical  model,  the  sensor  model  computes  the 
probabilities,  P\C) .  The  combination  of  the  physical  and  sensor  models  produce  the 
values.  The  Bayesian  updating  model  calculates  the  probability  map  at  time  period  u, 

.  High  value  of  indicates  that  there  is  a  strong  likelihood  that  a  chemical  attack 
has  occurred  at  location  /,  t  time  periods  ago. 

The  three  modules  are  illustrated  in  Figure  4. 
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THE  MODEL 


Physical  model: 

•  Gaussian  Puff  for  instantaneous  releases 

•  Gaussian  Plume  for  continuous  releases 


c,  chemical  concentration  due  to  an  attaek  at  location 
I,  t  time  periods  ago  arriving  at  the  location  of  sensor  s 


Sensor  model: 

•  Cookie  eutter  sensor  model 

•  Continuous  sensor  model 


Pi\,  the  probability  that  a  sensor  loeated  at  loeation  s 


detects  a  chemical  attack  at  location  /,  that  occurred  t 
time  period  ago 


Bayesian  updating  model: 

•  Single  sensor  model 

•  Multiple  sensors  model 


Figure  4.  Overview  of  the  model 
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IV.  SMALL  SCALE  TEST  CASES:  RESULTS  AND  DISCUSSION 


In  this  chapter,  we  perform  small  scale  simulation  tests  using  MATLAB  for 
evaluating  the  effectiveness  of  the  model  developed  in  Chapter  III.  We  compare  the 
single  sensor  and  multiple-sensors  models  and  illustrate  the  advantage  of  having  a  larger 
number  of  sensors  in  achieving  better  estimates  of  the  attack  location  and  time.  The  small 
scale  test  eases  also  serve  as  preliminary  cheeks  on  the  model  integrity  and 
implementation. 

The  Measures  of  Effectiveness  (MOEs)  used  are; 

•  Aecurately  identifying  the  souree  loeation;  and 

•  Aeeurately  identifying  the  time  of  release. 

These  MOEs  are  chosen  due  to  their  impaet  on  operations.  The  souree  loeation 
and  time  of  release  are  eritieal  inputs  for  threat  management  and  eontrol  and  therefore 
their  aeeuraey  is  paramount  for  making  important  taetical  deeisions. 

The  small  seale  scenario  eomprises  an  area  of  300m  x  300m  divided  into  nine 
eells  of  100m  x  100m  eaeh.  The  time  period  is  one  minute  and  the  chemieal  attaek  oeeurs 
at  eell  4  at  u  =  4. 

A.  SINGLE-SENSOR 

The  single  sensor  is  placed  in  cell  5  (see  Eigure  5).  The  sensor  is  operational  at 
M  =  0  (0800h).  During  the  simulation  run,  which  ends  10  time  periods  later  at  081  Oh,  the 
sensor  only  returns  a  single  alarm  at  w  =  5.  Eigure  5  illustrates  the  setup  for  the  single 
sensor  ease. 
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100m 


100m 


100m 


- ► 

Wind  direction 


100m 

100m 


100m 


Figure  5.  Test  setup  of  the  small  scale  case  study  for  a  single  sensor 


The  input  parameters  for  this  model  are  summarized  in  Table  6. 

The  attack  location  is  area  cell  4,  the  nerve  agent  used  in  the  attack  is  Sarin  and 
the  amount  of  agent  released  is  50kg.  The  time  of  attack  is  simulated  to  occur  at  w  =  4. 
We  assume  , probability  of  a  chemical  attack  at  location  /  in  a  given  time  period  to  be 
0.001. 


Table  6.  Model  input  parameters  for  the  small-scale  test  case  scenarios 


(I)  Physical  model(Gaussian  Puff) 

Type  of  Chemical  Warfare 
Agent 

Nerve  Agent 

Quantity  released  (kg/m^) 

50 

Wind  direction  (°) 

90 

Wind  speed  (m/s) 

2 

Pasquill-Gifford  stability 

class 

A 

(II)  Sensor  model 

c,  the  chemical  concentration  arriving  at  sensor  s  is  obtained  from  the  physical  model 

Cookie  cutter 

1  if  c>0.0lmg  / 

l-q  otherwise 
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Continuous 

KXc)  =  < 

1  z/c  >  30  mg  / 

0.9  c>  7.5  mg  /  m^  and  <  30  mg  /  m^ 

0.8  if  c>  2  mg  /  m^  and  <  7.5  mg  /  m^ 

0.7  f  C-  0.5  mg  /  m^  and  <  2  mg  /  m^ 

0.6  if  c>  0.125  mg  /  m^  and  <0.5  mg  /  m^ 

0.5  z/c>0.01  mg  1  m^  =  Detection  threshold 

l-q  otherwise 

(III)  Bayesian  updating  model 

,  probability  of  a  chemical  attack  at  location  /  in  a  given  time  period 

0.001 

l-q ,  false  positive  probability 

0.2 

P,] ,  Probability  that  a  sensor  located  at  location  s  detects  at  time  u  a 
chemical  attack  at  location  /,  t  time  periods  ago. 

Obtained 

from 

sensor 

model 

1.  Results  from  the  Physical  Model 

The  results  from  the  Gaussian  puff  model  are  listed  in  Table  7,  where  X  represents 
the  distanee  away  from  the  source  in  the  x-axis  in  meters,  and  Y  represents  the  distance 
away  from  the  source  in  they- axis  in  meters. 


Table  7.  Chemical  concentration  according  to  the  Gaussian  Puff  model  for  the 

small-scale  test  scenario 


Concentration  in  mg/m 

X(meters) 

T(meters) 

0  min 

1  min 

2  min 

3  min 

4  min 

5  min 

6  min 

0 

0 

1053503 

0.00 

0.00 

0.00 

0.00 

0.00 

0.00 

0 

100 

0.00 

0.00 

0.00 

0.00 

0.00 

0.00 

0.00 

0 

200 

0.00 

0.00 

0.00 

0.00 

0.00 

0.00 

0.00 

100 

0 

0.00 

213.42 

0.00 

0.00 

0.00 

0.00 

0.00 

100 

100 

0.00 

0.00 

0.00 

0.00 

0.00 

0.00 

0.00 

100 

200 

0.00 

0.00 

0.00 

0.00 

0.00 

0.00 

0.00 

200 

0 

0.00 

0.40 

30.47 

0.00 

0.00 

0.00 

0.00 

200 

100 

0.00 

0.00 

0.00 

0.00 

0.00 

0.00 

0.00 

200 

200 

0.00 

0.00 

0.00 

0.00 

0.00 

0.00 

0.00 
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2. 


Results  from  the  Sensor  Model 


Using  c,  the  chemical  concentration  arriving  at  sensor  s  obtained  from  the  output 
of  the  Gaussian  puff  model,  both  the  cookie  cutter  and  continuous  sensor  model  yield  the 
following  values  of  ,  where  Pi]  is  the  probability  that  the  sensor  placed  at  location  5 
currently  detects  a  chemical  attack  at  location  /,  that  occurred  t  time  period  ago.  The 
values  of  P^i  are  shown  in  Table  8. 


Table  8.  P^,  values  for  the  small-scale  test  scenario 


Attack  time  scale,  t  time  periods  since  the  occurrence  of  the  chemical  attack 

Location(/) 

0 

1 

2 

3 

4 

5 

6 

7 

8 

9 

1 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

3 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

4 

0.2 

1 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

5 

1 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

6 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

7 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

8 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

9 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

3,  Results  from  the  Bayesian  Updating  Model 

At  M  =  0,  we  have  no  updates  from  the  sensor  located  at  cell  5,  hence,  ,  the 
probability  of  a  chemical  attack  at  location  /  in  a  given  time  period,  is  determined  by 
threat  and  vulnerability  studies  of  the  defender.  For  this  test  case,  we  assume  that  it  is 
uniformly  distributed  over  the  area  cells  with  a  value  of  0.001.  The  probability  map  for 
is  shown  in  Figure  6. 
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Attack  location 


Attack  time  horizon  t 


Figure  6.  Probability  map  at  u  =  0  for  the  small  scale  case  study  for  a  single  sensor 

At  M  =  1,  the  sensor  records  no  detection,  hence  a]^  decreases  for  the  cells  at 
which  a  chemical  attack  at  t  =  0  to  9  time  periods  ago  are  expected  to  give  off  a  sensor 
alarm.  The  cells  affected  are  4  and  5.  The  probability  map  for  a],  is  shown  in  Figure  7. 


Attack  time  horizon  t 


Figure  7.  Probability  map  at  u  =  1  for  the  small  scale  case  study  for  a  single  sensor 

The  sensor  continues  with  no  detections  up  to  u  =4.  Hence  a/,  decreases  for  the 

cells  at  which  a  chemical  attack  at  t  =  0  to  9  time  periods  are  expected  to  give  off  a 
sensor  alarm.  The  cells  affected  are  4  and  5.  The  probability  map  at  w  =  4  is  as  shown  in 
Figure  8. 
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Figure  8.  Probability  map  at  w  =  4  for  the  small  seale  ease  study  for  a  single  sensor 

At  w  =  5,  the  sensor  updates  with  a  deteetion  alarm,  henee  increases  for  the 

cells  at  which  a  chemical  attack  at  t  =  0  to  9  time  periods  ago  are  expected  to  give  off  a 
sensor  alarm.  From  Figure  9,  we  can  see  peaks  for  releases  at  (i)  location  5  at  t  =  0,  (ii) 
location  4  at  t  =  1 . 


Attack  time  horizon  t 


Figure  9.  Probability  map  at  u  =  5  for  the  small  scale  case  study  for  a  single  sensor 

From  the  Gaussian  puff  model,  the  chemical  plume  generated  from  the  chemical 
attack  at  location  4  at  w  =  4  passes  over  the  sensor  placed  at  location  5  at  w  =  5.  Hence  no 
more  correct  detection  updates  can  be  received  from  the  sensor  from  time  u  =  6  onwards. 
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The  peaks  observed  are  preserved  and  eontinue  to  slide  aeross  the  attaek  time  horizon,  as 
shown  in  Figure  10,  which  shows  the  probability  map  for  m  =  6. 


Figure  10.  Probability  map  at  m  =  6  for  the  small  scale  case  study  for  a  single  sensor 

The  peaks  observed  are  preserved  and  continues  to  slide  across  the  attack  time 
horizon  with  each  update  till  the  end  of  the  simulation  at  w  =  10.  From  the  contour  plot  in 
Figure  11,  it  can  be  seen  that  the  model  produces  two  estimates  of  the  location  and  time 
of  the  chemical  attack.  They  are  (i)  cell  location  5  at  w  =  5  (t  =  5)  with  a  posterior 
probability  of  0.00501  and  (ii)  cell  location  4  at  u  =  4  which  is  the  true  attack,  with  a 
posterior  probability  of  0.00502. 


Figure  1 1 .  Probability  map  at  w  =  10  for  the  small  scale  case  study  for  a  single  sensor 
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Notice  that  both  estimates  -  the  erroneous  one  in  i  and  the  eorreet  one  in  ii  -  are 
identified  with  negligible  probabilities.  These  ineonelusive  results  are  due  to  the 
relatively  high  false  positive  probability  (0.2)  and  the  poor  eoverage  by  only  one  sensor. 

Next  we  extend  the  single  sensor  model  to  a  multiple-sensors  model,  whieh  is  a 
more  aeeurate  abstraetion  of  reality. 

B.  MULTIPLE  SENSORS  SMALL  SCALE  TEST  SCENARIO 


Suppose  that  in  addition  to  the  sensor  in  eell  5,  sensors  are  also  placed  in  cells  4 
and  6.  During  the  simulation  run,  whieh  ends  10  time  periods  later,  the  sensor  plaeed  at 
eell  4  returns  a  single  alarm  at  w  =  4,  the  sensor  plaeed  at  eell  5  returns  a  single  alarm  at 
u  =  5  and  the  sensor  plaeed  at  eell  6  returns  a  single  alarm  at  w  =  6.  Figure  12  illustrates 
this  setup. 


- ► 

Wind  direetion 


100m  100m  100m 


100m 


100m 


100m 


Figure  12.  Test  setup  of  the  small  seale  ease  study  with  multiple  sensors 


1,  Results  from  the  Physical  Model 

The  results  from  the  Gaussian  puff  model  for  the  multiple  sensors  small  seale 
seenario  are  exaetly  the  same  as  that  of  the  single  sensor  ease  test  sinee  they  share  the 
same  ehemieal  attaek  seenario. 
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2. 


Results  from  the  Sensor  Model 


Using  c,  the  chemical  concentration  arriving  at  sensor  s  obtained  from  the  output 
of  the  Gaussian  puff  model,  both  the  cookie  cutter  and  continuous  sensor  model  yield  the 
following  values  of  where  5  =  4,  5  and  6.  This  is  because  the  dispersion  of  the 

chemical  plume  over  the  area  of  the  small  scale  test  scenario  does  not  exhibit  large 
deviations  in  concentrations. 


Table  9.  Results  from  the  sensor  model  for  sensor  4 


^l,t 

Attack  time  scale,  t  time  steps  since  the  occurrence  of  the  chemical  attack 

Location 

0 

1 

2 

3 

4 

5 

6 

7 

8 

9 

1 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

3 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

4 

1 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

5 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

6 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

7 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

8 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

9 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

Table  10.  Results  from  the  sensor  model  for  sensor  5  (the  same  as  for  the  single 

sensor  case) 


l,t 

Attack  time  scale,  t  time  steps  since  the  occurrence  of  the  chemical  attack 

Location 

0 

1 

2 

3 

4 

5 

6 

7 

8 

9 

1 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

3 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

4 

0.2 

1 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

5 

1 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

6 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

7 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

8 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

9 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 
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Table  11. 


Results  from  the  sensor  model  for  sensor  6 


p6 

Attack  time  scale,  t  time  steps  since  the  occurrence  of  the  chemical  attack 

Location 

0 

1 

2 

3 

4 

5 

6 

7 

8 

9 

1 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

3 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

4 

0.2 

0.2 

1 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

5 

0.2 

1 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

6 

1 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

7 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

8 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

9 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

0.2 

3,  Results  from  the  Bayesian  Updating  Model 

At  w  =  0  (0800h),  all  three  sensors  do  not  report,  henee  ,  the  probability  of  a 
ehemieal  attaek  at  any  loeation  in  a  given  time  period  is  determined  by  threat  and 
vulnerability  studies.  As  before,  we  assume  that  =  0.001.  The  probability  map  at 
M  =  0  is  shown  in  Figure  13. 


Figure  13.  Probability  map  at  w  =  0  for  the  small  scale  case  study  with  multiple  sensors 
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At  M  =  1,  all  3  sensors  still  do  not  report,  hence  a]^  decreases  for  the  cells  at 

which  a  chemical  attack  at  t  =  0  to  9  time  periods  ago  relative  to  m  =  1,  is  expected  to  give 
off  a  sensor  alarm.  The  cells  affected  are  4,  5  and  6.  The  probability  map  at  m  =  1  is  as 
shown  in  Figure  14. 


Attack  time  horizon  t 


Figure  14.  Probability  map  at  w  =  1  for  the  small  scale  case  study  with  multiple  sensors 


The  3  sensors  continue  not  to  respond  up  to  u  =  3  (0803h).  Flence  the  values  of 
af,  decrease  for  the  cells  at  which  a  chemical  attack  at  t  =  0  to  9  time  periods  ago 

relative  to  w  =  3,  is  expected  to  give  off  a  sensor  alarm.  The  cells  affected  are  4,  5  and  6. 
The  probability  map  at  w  =  3  is  as  shown  in  Figure  15. 


Figure  15.  Probability  map  at  u  =  3  for  the  small  scale  case  study  with  multiple  sensors 
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At  M  =  4,  the  sensor  placed  at  cell  4  reports  a  detection,  hence  the  value  of  a/, 

increases  for  the  cells  at  which  a  chemical  attack  at  t  =  0  to  9  time  periods  ago  relative  to 
u,  is  expected  to  give  off  a  sensor  alarm.  The  sensors  in  cells  5  and  6  do  not  signal 
detection.  From  Figure  16,  we  can  see  a  peak  for  a  release  at  location  4  at  t  =  0. 


Figure  16.  Probability  map  at  w  =  4  for  the  small  scale  case  study  with  multiple  sensors 

At  M  =  5,  the  sensor  placed  at  cell  5  reports  a  detection  while  the  sensors  in  4  and 
6  do  not  report  a  detection.  The  value  of  increases  for  the  cells  at  which  a  chemical 

attack  at  t  =  0  to  9  time  periods  ago  relative  to  u,  is  expected  to  give  off  a  sensor  alarm. 
From  Figure  17,  we  can  see  a  new  peak  for  a  release  at  location  5  at  t  =  0  and  an  increase 
in  intensity  of  the  previous  peak  for  a  release  at  /  =  4,  t  =  1 . 
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Figure  17.  Probability  map  at  w  =  5  for  the  small  scale  case  study  with  multiple  sensors 

At  M  =  6,  the  sensor  placed  at  cell  6  reports  a  detection  while  the  sensors  at  cells  4 
and  5  do  not  report  a  detection.  The  value  of  af,  increases  for  the  cells  at  which  a 

chemical  attack  at  t  =  0  to  9  time  periods  ago  relative  to  u,  is  expected  to  give  off  a  sensor 
alarm.  From  Figure  18,  we  can  see  a  new  peak  for  a  release  at  location  6  at  t  =  0  and  an 
increase  in  intensity  of  the  previous  peaks  at  location  5  at  t  =  \  and  at  location  4  at  t  =  2. 


Figure  18.  Probability  map  at  w  =  6  for  the  small  scale  case  study  with  multiple  sensors 
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From  the  Gaussian  puff  model,  the  ehemieal  plume  generated  from  the  ehemieal 
attaek  at  location  4  at  w  =  4  passes  over  all  the  sensors  placed  in  the  area  of  operation  at 
u  =  1 .  Hence  no  more  detection  reports  can  be  received  from  the  sensors.  The  peaks 
observed  are  preserved  and  continue  to  slide  across  the  attack  time  horizon  as  shown  in 
Figure  19,  which  shows  the  probability  map  for  u  =  7. 


Attack  time  horizon  t 


Figure  19.  Probability  map  at  w  =  7  for  the  small  scale  case  study  with  multiple  sensors 

From  the  contour  plot  at  w  =  10,  in  Figure  20,  it  can  be  seen  that  the  model 
produces  a  single  estimate  of  the  location  and  time  of  the  chemical  attack. 
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0123456789 
Attack  time  horizon 

Figure  20.  Probability  map  at  w  =  10  for  the  small  scale  case  study  with  multiple  sensors 
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From  the  series  of  probability  maps  above,  the  peaks  observed  from  the  onset  of 
the  first  alarm  eontinue  to  slide  aeross  the  attack  horizon  with  each  update  until  the  end  of 
the  simulation.  The  chemical  attack  characteristic  can  be  identified  to  be  at  location  4  at  w 
=  4  with  a  probability  of  occurrence  of  0. 1 1 . 

The  actual  time  of  release  and  attack  location  in  this  simulation  is  /  =  4  and  w  =  4, 
which  is  the  estimate  given  by  the  model.  The  posterior  probability  obtained  for  an  attack 
at  M  =  4  at  /  =  4  is  0.11  is  too  low  to  sound  an  alarm  that  triggers  a  response.  This 
probability  value,  while  larger  than  the  value  obtained  for  the  single  sensor  case,  is  still 
low  because  of  relatively  high  false  positive  probability  and  insufficient  coverage. 

C.  COMPARISON  STUDY  BETWEEN  SINGLE-SENSOR  AND 

MULTIPLE-SENSORS  MODEL 

With  all  scenario  parameters  kept  constant  with  the  exception  of  the  number  of 
sensors  used,  it  is  evident  that  with  multiple  sensors,  the  model  is  better  able  to  estimate 
both  the  location  and  time  of  attack.  Tablel2  summarizes  the  results  obtained  from  both 
models  for  the  same  threat  scenario. 


Table  12.  Results  of  comparison  study  between  single  and  multiple  sensors  model 


Attack 

Time  of  attack 

Probability  of  attack  at  location 

Location  (/) 

(0 

/  and  time  t 

Actual 

4 

0804 

- 

Single  Sensor 

4 

0804 

0.00501 

5 

0805 

0.00502 

Multiple  Sensor 

4 

0804 

0.11 

For  the  same  attack  scenario,  the  multiple-sensors  model  provides  more  accurate 
estimates  of  the  location  and  time  of  the  attack  (probability  of  0.11).  The  single  sensor 
model,  on  the  other  hand,  returns  multiple  estimates  with  low  probabilities.  Hence  it  is 
concluded  that  a  multiple  sensors  model  provides  better  estimates  of  a  chemical  attack. 
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The  simple  test  cases  serve  as  a  preliminary  check  on  the  model  integrity  and 
implementation.  The  multiple-sensors  model  was  found  to  able  to  estimate  accurately 
both  the  time  and  location  of  the  attack.  With  this  encouragement,  the  multiple-sensors 
model  will  next  be  implemented  with  respect  to  large  scale  settings  that  better  depict  real- 
world  operations. 
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V.  MODEL  EVALUATION 


In  this  chapter,  we  evaluate  the  model  with  respect  to  settings  that  more  closely 
depict  real-world  scenarios.  Preliminary  simulation  runs  are  first  performed  to  (i) 
establish  the  noise  floor  of  the  model  and  (ii)  select  an  alarm  threshold  for  the  probability 
map  provided  that  will  trigger  a  response  to  the  chemical  attack  detected.  The  noise  floor 
of  the  model  is  the  baseline  value  of  the  posterior  probabilities  in  the  probability  maps 
that  is  attributed  to  the  presence  of  false  positive  signals.  Based  on  the  preliminary 
simulation  runs,  an  experimental  test  matrix  is  developed  to  evaluate  the  model  and 
determine  the  contribution  of  the  lead  factors. 

In  evaluating  the  model,  a  false  positive  error  is  defined  as  a  signal  from  a  sensor 
that  is  exposed  to  a  chemical  concentration  below  its  detection  threshold.  A  false  negative 
error  is  defined  as  the  absence  of  a  signal  from  a  sensor  that  is  exposed  to  a  chemical 
concentration  which  is  above  the  detection  threshold  of  the  sensor. 

Section  A  describes  the  basic  scenario  that  is  used  for  the  evaluation.  Section  B 
discusses  the  results  of  the  preliminary  simulation  runs.  Section  C  details  the  test  matrix 
used  for  evaluating  the  model.  Section  D  discusses  the  evaluation  results  of  the  model. 
Section  E  discusses  the  insights  obtained  on  sensor  coverage  and  deployment. 

A,  BASIC  SCENARIO 

The  area  of  operations  is  a  1km  1km  square  divided  into  a  grid  of  100  location 
cells  (henceforth  called  cells)  each  of  size  1 00m x  100m.  A  total  of  16  sensors  are 
deployed  in  the  area  of  operations.  The  placement  of  the  sensors  is  fixed  throughout  and 
follows  common  operational  tactics.  The  prevailing  wind  speed  and  direction  are  1.67m/s 
and  east,  respectively. 

It  is  assumed  that  on  average  there  are  10  false  positive  signals  during  a  one-hour 

period.  Hence^”^,  the  probability  of  a  false  positive  cue  from  any  of  the  16  sensors 
deployed  in  a  one-minute  time  period  is  set  to  be  10/(60  x  16)  =0.0104.  The  quantity  of 
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chemical  agent  which  is  assumed  to  be  Sarin  to  be  released,  is  set  to  a  nominal  attack 
quantity  of  50kg  and  we  assume  that  the  attack  occurs  at  u  =  5. 

Figure  21  depicts  the  area  of  operations  with  the  16  sensors  located  in  the  shaded 

cells. 


N 

A 

- ►  E 


- ► 

1.67m/s 


Figure  21 .  Illustration  of  the  area  of  operations 

B.  PRELIMINARY  TRIALS 

Four  attack  locations  are  randomly  selected  amongst  the  100  locations  possible.  In 
addition,  a  simulation  test  case  with  no  attack  is  also  performed.  Each  of  the  five 
preliminary  simulation  test  cases  is  replicated  five  times.  The  simulation  tests  cases  are 
summarized  in  Table  13. 


1 

2 

3 

4 

5 

6 

7 

8 

9 

1  0 

1 1 

1  2 

1  3 

1  4 

1  5 

1  6 

1  7 

1  8 

1  9 

20 

2  1 

22 

23 

24 

25 

26 

27 

28 

29 

3  0 

3  1 

32 

33 

34 

3  5 

3  6 

3  7 

3  8 

3  9 

40 

4  1 

42 

43 

44 

45 

46 

47 

48 

49 

5  0 

5  1 

52 

53 

54 

55 

5  6 

57 

5  8 

59 

60 

6  1 

62 

63 

64 

65 

66 

67 

68 

69 

70 

7  1 

72 

73 

74 

75 

76 

77 

78 

79 

80 

8  1 

82 

83 

84 

85 

86 

87 

8  8 

89 

90 

9  1 

92 

93 

94 

95 

96 

97 

98 

99 

100 
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Table  13. 


Test  cases  and  their  attack  location  for  the  preliminary  trials 


Test  Case  Number 

Attack  location 

1 

No  attack 

2 

45 

3 

48 

4 

51 

5 

85 

The  simulation  details  of  the  test  cases  are  summarized  in  Table  14. 


Table  14.  Simulation  details  of  the  preliminary  trials 


Simulation  Details 

Fixed  parameters 

Area  of  operations 

1km  X  1km 

Grid  representation 

10  by  10  cells 

Cell  resolution 

100m 

Meteorological  Data 

wind  speed 

1.67 

wind  direction 

East 

stability  class 

A 

Sensor  Data 

Number  of  sensors  deployed 

16 

Locations  of  sensors 

Cell  1,  10,14,17,33,38,41,45,50,56,63,68,84,87,91,100 

Chemical  attack  data 

Chemical  agent  used 

Sarin 

Release  type 

Instantaneous 

Quantity  released 

50kg 

Time  of  attack 

u  =  5 

Parameters  varied 

Sensor  signal  return 

Simulated  to  return  1  with  a  probability  of  detection  7^', , 

0  with  probability  1  -  ,  where  7^*  is  determined  by  the 

physical  and  sensor  models. 

The  inputs  parameters  of  the  model  are  summarized  in  Table  15. 
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Table  15. 


Input  parameters  of  the  model 


(I)  Physical  model(Gaussian  Puff) 

Chemical  Warfare  Agent 

Sarin 

Quantity  released  (kg/m  ) 

50 

Wind  direction  (°) 

90 

Wind  speed  (m/s) 

1.666666667 

Pasquill-Gifford  stability  class 

A 

(II)  Sensor  model 

c,  the  chemical  concentration  arriving  at  sensor  s  is  obtained  from  the  physical  model 

Continuous 

Pi:ac)=< 

1  z/c  >  30  mg  / 

0.9  if  c>  7.5  mg  /  m^  and  <  30  mg  /  m^ 

0.8  if  c>  2  mg  /  m^  and  <  7.5  mg  /  m^ 

0.7  f  c>  0.5  mg  /  m^  and  <  2  mg  /  m^ 

0.6  if  c>  0.125  mg  /  m^  and  <0.5  mg  /  m^ 

0.5  z/c>0.01  mg  !  rn  =  Detection  threshold 

\-q  otherwise 

(III)  Bayesian  updating  model 

L,  number  of  attack  locations 

100 

T,  time  horizon  of  an  attack  in  the  area  of  operation 

15 

,  a  priori  probability  of  a  chemical  attack  at  a  certain  location  in  a 
given  time  period 

0.001 

1-q  ,  false  positive  probability 

0.0104 

Pi\ ,  probability  that  a  sensor  located  at  location  s  detects  at  time  u  a 
chemical  attack  at  location  /,  that  has  occurred  t  time  periods  ago. 

Obtained  from 
sensor  model 

1.  Results  from  the  Physical  Model 

The  results  from  the  Gaussian  puff  model  give  the  temporal  concentration  of 
material  from  the  release  of  50kg  of  the  nerve  agent  Sarin  at  w  =  0.  Figure  22  depicts  the 
dispersion  of  the  nerve  agent  along  the  x  and  y  directions  from  the  chemical  release 
source,  at  1  minute  intervals.  The  x-axis  and  y-axis  show  the  distance  in  meters  from  the 
chemical  source  in  the  x  and  y  direction,  respectively.  The  right  hand  side  scale  shows  the 

-5 

concentration  of  the  chemical  plume  in  mg/m  . 
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Figure  22.  Series  of  time  plots  that  show  concentration  profiles  of  the  chemical  puff  over 

distances  from  the  source  in  the  x  and  j  direction 

From  the  series  of  time  plots  in  Figure  22,  it  can  be  seen  that  in  13  minutes,  the 
chemical  puff  has  passed  over  1km,  only  leaving  traces  of  low  concentrations,  1x10'^ 
mg/m  ,  at  a  distance  of  1km  from  the  source  location.  Hence  in  our  area  of  operations  of 
size  1km  by  1km,  the  chemical  puff  generated  from  any  release  location  would  pass  over 
in  at  most  13  minutes,  leaving  trace  concentrations  that  are  below  the  detection  threshold 
of  the  sensors.  Thus,  the  time  horizon  T  is  bounded  by  13  minutes. 
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2. 


Results  of  the  Sensor  Model 


The  results  of  the  sensor  model  for  the  inputs  given  in  Table  15  are  shown  in  the 
Appendix. 


3,  Simulation  Results  for  Test  Case  1,  No  Chemical  Attack 

A  no-attack  test  case  aims  to  establish  the  noise  floor  of  the  system  of  sensors. 
This  enables  decision  makers  to  set  a  lower  bound  on  the  alarm  threshold  for  an  action  to 
be  taken.  Table  16  summarizes  the  number  of  false  positive  signals  return  for  each 
simulation  run. 


Table  16.  Number  of  false  positive  signals  in  each  of  the  simulation  runs 


Simulation  run  number 

Number  of  false  positive  signals 

1 

1 

2 

0 

3 

7 

4 

5 

5 

3 

Figure  23  shows  the  plot  of  g{u)  =  max,^  ,  the  highest  values  per  time  period 

in  the  probability  map  during  the  detection  time  horizon,  for  each  of  the  five  simulation 
runs. 


—  Run  1 
•  Run  2 

- Run  3 

«  Run  4 
■  Run  5 


Figure  23.  Highest  probability  values,  g{u)  =  max,^  ,  within  the  probability  map 

across  the  detection  time  horizon. 
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From  Figure  23,  it  can  be  seen  that,  as  expected,  the  noise  floor  increases  with  the 
number  of  false  positive  errors.  Based  on  the  5  simulation  runs  performed  we  set  the 
lower  bound  on  the  alarm  threshold  at  0.2.  In  setting  an  alarm  threshold  for  an  action  to 
be  taken;  a  posterior  probability  of  0.7  is  selected,  which  is  reasonable  for  an  estimated 
noise  floor  of  0.2. 

4,  Simulation  Results  for  Test  Case  2,  Attack  at  Location  45 

For  an  attack  at  cell  45,  the  Expected  Number  of  Correct  Signals  (ENCS)  is  5.27 
from  3  different  sensors.  The  parameter  ENCS  is  associated  with  a  given  cell  /,  and  is 
defined  as  the  expected  number  of  signals  from  the  deployed  sensors  given  a  chemical 
attack  at  location  /.  The  ENCS  is  a  measure  of  the  sensor  coverage;  the  higher  the  value 
of  ENCS  for  a  certain  cell,  the  better  the  sensor  coverage  of  that  cell.  The  ENCS  is 
dependent  on  the  specific  layout  of  the  deployed  sensors  relative  to  the  attack  location.  It 
is  important  to  take  notice  of  the  ENCS  as  it  is  a  factor  that  affects  the  performance  of  the 
model.  The  statistics  of  the  five  simulation  runs  are  summarized  in  Table  17. 


Table  17.  Simulated  sensor  signals  and  model  outputs  for  preliminary  test  case  2 


Run  1 

Run  2 

Run  3 

Run  4 

Run  5 

Simulated  signal  returns 

Number  signals  from  sensor 
deployed 

7 

7 

7 

6 

13 

Ealse  positive  errors 

0 

1 

1 

0 

8 

Ealse  negative  errors 

0 

1 

1 

1 

1 

Correct  signals 

7 

6 

6 

6 

5 

Model  outputs 

Estimate  of  attack  location 

Cell  45 

Cell  45 

Cell  45 

Cell  45 

Cell  45 

Estimate  of  time  of  attack 

u  =  5 

u  =  5 

u  =  5 

u  =  5 

u  =  5 

Eocation  error  (meters) 

0 

0 

0 

0 

0 

Time  of  release  error  (mins) 

0 

0 

0 

0 

0 

Time  at  which  alarm  threshold  of 
0.7  is  crossed 

M  =  8 

M  =  8 

M  =  8 

u  =  9 

M  =  8 

Highest  posterior  for  the  correct 
location  and  time, 

0.997 

0.997 

0.986 

0.994 

1 

Time  at  which  the  highest  value 
of  the  correct  posterior  is 

M=  12 

M  =  10 

u=\2 

u=U 

u  =  9 
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observed,  ArgMax^a^^  ^_^ 

Presence  of  incorrect  posteriors 
>  alarm  threshold  of  0.7 

No 

No 

No 

No 

No 

Presence  of  incorrect  posteriors 
>  noise  floor  of  0.2 

No 

No 

No 

No 

Yes 

Is  ^  ^  • 

Yes 

Yes 

Yes 

Yes 

Yes 

From  Table  17,  it  can  be  seen  that  despite  the  presence  of  false  positive  and  false 
negative  errors  the  model  accurately  estimates  the  location  and  time  of  the  attack  within  4 
minutes  of  the  occurrence  of  the  attack.  It  is  observed  from  run  #4  that  false  negative 
errors  can  lead  to  a  delay  in  crossing  the  alarm  threshold  (w  =  9  as  opposed  to  w  =  8).  It  is 
observed  from  run  #5  that  false  positive  and  false  negative  errors  can  result  in  the 
presence  of  false  estimates,  where  a  false  estimate  is  a  posterior  of  an  attack  that  is  above 
the  noise  floor  in  a  wrong  location  and/or  at  a  time. 

We  present  here  only  the  results  of  run  #1.  This  run  represents  an  ideal  scenario  in 
which  there  is  no  occurrence  of  any  false  positive  or  false  negative  errors.  The  respective 
times  of  the  signals  (indicated  by  1)  and  the  corresponding  sensors  that  produced  them 
are  shown  in  Table  18 


Table  18.  Signals  from  the  respective  sensors  for  run  #1  of  test  case  1 


Location  of  sensor 

Detection 

time 

horizon(M) 

1 

10 

14 

17 

33 

38 

41 

45 

50 

56 

63 

68 

84 

87 

91 

100 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

2 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

3 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

4 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

5 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

0 

6 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

7 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

8 

0 

0 

0 

0 

0 

1 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

9 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

49 


10 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

11 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

12 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

13 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

14 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

15 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

16 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

17 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

18 

0 

0 

0 

0 
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The  series  of  probability  maps  for  simulation  run  #1  is  shown  in  Figure  24. 
Figure  24  compares  the  values  of  max, ,  a",  with  for  w  >5. 
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Figure  24.  Comparison  between  the  values  of  max, ,  a,“,  and  for  w  =  5 
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From  Figure  24  it  is  observed  that  has  the  highest  value  within  all  the 

probability  maps  aeross  the  deteetion  time  horizon.  The  model  returns  a  single  estimate 
of  the  attaek  location  and  time  -  cell  45  at  w  =  5.  In  addition,  crosses  the  alarm 

threshold  of  0.7  at  w  =  8.  Hence  the  model  is  able  to  estimate  accurately  the  attack 
location  and  time  within  3  minutes  of  the  attack. 

5,  Simulation  Results  for  Test  Case  3,  Attack  at  Location  48 

For  an  attack  at  cell  48,  the  ENCS  is  2,  from  a  single  sensor  at  cell  50.  The 
statistics  of  the  five  simulation  runs  are  summarized  in  Table  19. 


Table  19.  Simulated  sensor  signals  and  model  outputs  for  pre-screening  test  case  3 


Run  1 

Run  2 

Run  3 

Run  4 

Run  5 

Simulated  signal  returns 

Number  signals  from  sensor 
deployed 

4 

10 

4 

3 

6 

False  positive  errors 

1 

7 

1 

0 

3 

False  negative  errors 

0 

0 

0 

0 

0 

Correct  signals 

3 

3 

3 

3 

3 

Model  outputs 

Estimate  of  attack  location 

NA 

NA 

NA 

NA 

Cell  44 

Estimate  of  time  of  attack 

NA 

NA 

NA 

NA 

M=  13 

Eocation  error  (meters) 

NA 

NA 

NA 

NA 

100 

Time  of  release  error  (mins) 

NA 

NA 

NA 

NA 

8 

Time  at  which  alarm  threshold  of 
0.7  is  crossed 

NA 

NA 

NA 

NA 

M  =  15 

Highest  posterior  for  the  correct 
location  and  time, 

0.446 

0.431 

0.446 

0.494 

0.446 

Time  at  which  the  highest  value 
of  the  correct  posterior  is 
observed,  ArgMax^al^  ^,_^ 

u=  8 

u  =  S 

w  =  8 

w  =  20 

M  =  8 

Presence  of  incorrect  posteriors 
>  alarm  threshold  of  0.7 

No 

No 

No 

No 

Yes 

Presence  of  incorrect  posteriors 
>  noise  floor  of  0.2 

Yes 

Yes 

Yes 

Yes 

Yes 

No 

No 

No 

No 

No 
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a.  Results  and  Discussions  for  Simulation  Runs  1,  2  3,  and  4 

For  simulation  runs  1,  2,  3,  and  4,  the  model  is  able  to  estimate  accurately 
the  time  and  location  of  the  attack,  but  fails  to  trigger  an  alarm  as  the  likelihood  observed 
is  lower  than  the  alarm  threshold  of  0.7.  This  is  due  to  the  presence  of  a  false  estimate  of 
an  attack  at  cell  47  that  presumably  occurred  at  time  at  u  =  4. 

For  discussion  purposes,  we  present  the  results  for  simulation  run  #4 
where  there  are  no  false  positive  and  false  negative  errors  in  the  simulated  return  signals. 
Figure  25  compares  the  posterior  probabilities  of  the  correct  event,  with  the 

posterior  probabilities  of  the  false  event,  a'f  and  max, ,  for  w  >5  for  run  #4  of 
the  simulation  for  test  case  3. 


Detection  time  horizon  u 
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Figure  25.  Comparison  between  the  values  of  max,,a“, ,  al^  and  for  w  =  5 

for  run  #4  of  the  simulation  for  test  case  3 


It  can  be  seen  the  value  of  al-j  is  slightly  higher  than  the  value  of 

^43  and  is  equal  to  the  value  of  max, ,  over  the  detection  time  horizon.  It  is 

important  to  note  that  in  run  #4  there  are  no  false  positive  and  false  negative  errors  in  the 
simulated  return  signals.  Hence  the  model  is  unable  to  differentiate  between  an  attack  at 
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cell  48  at  M  =  5  and  an  attack  at  cell  47  at  w  =  4  with  just  3  signal  returns  from  the  single 
sensor  at  cell  50.  This  can  be  explained  by  the  values  for  these  attacks  in  Table  20. 


Table  20.  7^^°  values  for  sensor  50  for  attacks  at  location  cell  47  and  cell  48 


p50 

A,/ 

Attack  time  scale,  t  time  steps  since  the  occurrence  of  the  chemical 

attack 

Location 

0 

1 

2 

3 

4 

5 

6 

47 

0.01 

0.01 

0.70 

1.00 

0.70 

0.01 

0.01 

48 

0.01 

0.50 

1.00 

0.50 

0.01 

0.01 

0.01 

As  seen  from  Table  20,  when  3  consecutive  alarms  are  received  from 
sensor  50  at  u  =  6  till  u  =  8,  the  Bayesian  updating  model  will  increase  ocl-^ 

u-5  •  Hence  given  only  signal  returns  from  a  single  sensor,  the  model  is  unable  to 

differentiate  between  the  two  attacks.  The  consolation  is  that  in  such  an  event,  the 
probability  map  will  show  only  2  competing  estimates  with  a  spatial  difference  of  100m 
and  a  temporal  difference  of  1  minute.  Figure  26  shows  the  contour  plot  of  the  probability 
map  at  w  =  8,  for  simulation  run  4. 


70  [-  Attack  at  cell  48  at  u=5 

Posterior  probability=  0.446 


Attack  at  cell  47  at  u=4 
Posterior  probability  =  0.49 1 


Attack  time  horizon  t 


12  14 


Figure  26.  Contour  plot  of  the  probability  map  at  u  =  8  for  simulation  run  4  of  test  case  3 

It  is  important  to  note  that  the  competition  between  the  two  attack  events 

lowers  their  posterior  probability  as  the  model  is  conditioned  on  the  event  of  at  most  a 

single  attack.  Hence  the  alarm  threshold  of  0.7  cannot  be  met.  Competing  events  cannot 
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be  resolved  by  the  model  when  limited  information  is  available  to  differentiate  between 
them.  To  resolve  eompeting  events,  updates  of  the  events  are  needed  from  sensors 
loeated  at  different  loeations.  To  overeome  this,  one  possible  approaeh  is  to  sum  the 
posterior  probabilities  of  attaek  events  that  have  attaek  loeations  adjaeent  to  eaeh  other 
with  respeet  to  the  prevailing  wind  direetion  and  whose  times  of  attaeks  are  one  minute 
apart.  This  will  allow  the  eolleetive  estimate  to  meet  the  alarm  eriterion,  giving  two 
estimates  with  a  spatial  differenee  of  100m  and  a  temporal  differenee  of  1  minute. 
However  in  this  thesis,  this  approaeh  is  not  implemented. 

b.  Results  and  Discussions  for  Simulation  Run  5 

For  simulation  run  #5,  a  total  of  six  eorreet  signals  are  reeeived  from  the 
16  sensors  in  the  field.  Three  false  positives  are  eneountered  in  this  simulation  run.  The 
respeetive  times  of  the  signals  (indieated  by  1)  and  the  eorresponding  sensors  that 
produeed  them  are  shown  in  Table  21. 


Table  21.  Simulated  signal  returns  for  run  #5  of  pre-sereening  test  ease  3 


Loeation  of  sensor 

Deteetion 

time 

horizon(M) 

1 

10 

14 

17 

33 

38 

41 

45 

50 

56 

63 

68 

84 

87 

91 

100 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

2 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

3 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

4 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

5 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

6 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

7 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

8 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

9 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

10 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

11 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

12 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

13 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 
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0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

0 

15 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

16 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

17 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

18 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 
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20 
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0 
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0 

0 

0 

0 

0 
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For  simulation  run  #5,  the  alarm  threshold  is  erossed  for  an  attack  at 
location  cell  44  at  w  =  13,  that  is  >  0.7.  However  the  likelihood  of  this  attack  drops 

drastically  in  the  next  update  to  a  value  of  0.27.  Figure  27  plots  the  values  of  «44^_j3  , 
>  and  max, ,  for  w  >  5. 
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Figure  27.  Values  of  <244 


«47,„-4  ,  «48,«-5  ’  and  max, ,  a,“,  for  u  >5. 


From  Figure  27,  it  can  be  seen  that  similar  to  simulation  runs  1,  2,  3,  and  4 
the  model  is  unable  to  resolve  the  competing  events  of  an  attack  at  cell  47  at  w  =  4  and  an 
attack  at  cell  48  at  w  =  5.  However  the  posterior  probabilities  of  these  two  events  start  to 
drop  due  to  a  third  competing  event,  an  attack  at  cell  44  at  u  =  13.  The  third  competing 
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event  is  due  to  a  false  signal  from  the  sensor  at  cell  45  at  m  =  14  followed  by  a  false  signal 
from  the  sensor  at  cell  56  at  m  =  15.  This  is  evident  from  the  values  of  sensor  45  and 
sensor  56  in  Table  22. 


Table  22.  ^  values  for  sensor  45  and  56  for  attacks  at  location  cell  44 


p45 

^l,t 

Attack  time  scale,  t  time  steps  since  the  occurrence  of  the  chemical 

attack 

Location 

0 

1 

2 

3 

4 

5 

6 

44 

0.01 

1 

0.01 

0.01 

0.01 

0.01 

0.01 

p56 

Attack  time  scale,  t  time  steps  since  the  occurrence  of  the  chemical 

attack 

Location 

0 

1 

2 

3 

4 

5 

6 

44 

0.01 

0.01 

0.5 

0.01 

0.01 

0.01 

0.01 

However  in  the  absence  of  further  signal  returns  that  support  the 
occurrence  of  the  third  event,  its  posterior  probability  drops  drastically  in  the  next  update 
at  M  =  16  to  a  value  of  0.27.  Hence  the  third  event  produces  a  peak  that  crosses  the  alarm 
threshold  only  at  w  =  15.  The  peak  is  not  persistent  and  fades  away  as  shown  in  Figure 
28. 
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Probability  map  at  u=15 


Figure  28.  Probability  maps  for  simulation  run  #5  at  w  =  15  and  w  =  16 


In  simulation  run  #5,  the  number  of  false  positive  and  false  negative 

signals  is  lower  than  that  of  run  #2  whieh  did  not  produee  a  false  estimate.  Yet  a  false 

estimate  is  made  with  a  strong  possibility  of  0.77.  Henee  the  aeeuraey  the  model  is 

57 


affected  not  only  by  the  number  of  false  positives  but  also  significantly  by  the  time  and 
place  of  their  occurrence.  If  the  false  positives  collectively  form  a  pattern  that  mimics  the 
possible  occurrence  of  a  chemical  attack,  the  model  will  provide  an  estimate  of  the  false 
attack.  We  suspect  such  an  occurrence  is  rare  as  false  positives  are  random  in  nature.  Still 
this  can  be  overcome  with  a  more  stringent  requirement  such  as  the  need  for  consecutive 
posterior  probabilities  that  cross  the  alarm  threshold  before  an  alarm  is  set  off. 

6,  Simulation  Results  for  Test  Case  4,  Attack  at  Location  51 

For  an  attack  at  cell  51,  the  ENCS  is  18,  from  five  different  sensors.  The  statistics 
of  the  five  simulation  runs  are  summarized  in  Table  23. 


Table  23.  Simulated  sensor  signals  and  model  outputs  for  pre-screening  test  case  4 


Run  1 

Run  2 

Run  3 

Run  4 

Run  5 

Simulated  signal  returns 

Number  signals  from  sensor 
deployed 

21 

21 

20 

22 

24 

False  positive  errors 

1 

1 

2 

3 

5 

False  negative  errors 

1 

1 

3 

2 

2 

Correct  signals 

20 

20 

18 

19 

19 

Model  outputs 

Estimate  of  attack  location 

Cell  51 

Cell  51 

Cell  51 

Cell  51 

Cell  51 

Estimate  of  time  of  attack 

u  =  5 

u  =  5 

u  =  5 

u  =  5 

u  =  5 

Eocation  error  (meters) 

0 

0 

0 

0 

0 

Time  of  release  error  (mins) 

0 

0 

0 

0 

0 

Time  at  which  alarm  threshold  of 
0.7  is  crossed 

u  =  9 

w  =  1 1 

u  =  \0 

w  =  10 

M  =  10 

Highest  posterior  for  the  correct 
location  and  time,  Max„a“j 

1 

1 

0.998 

0.999 

1 

Time  at  which  the  highest  value 
of  the  correct  posterior  is 
observed,  ArgMax^a^^ 

u  =  \2 

u  =  U 

u  =  \3 

w  =  14 

u=  \3 

Presence  of  incorrect  posteriors 
>  alarm  threshold  of  0.7 

No 

No 

Yes 

No 

No 

Presence  of  incorrect  posteriors 
>  noise  floor  of  0.2 

Yes 

Yes 

Yes 

Yes 

Yes 

No 

No 

No 

No 

No 
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The  model  is  able  to  estimate  the  time  and  location  of  the  attack  accurately  for  all 
five  runs  despite  the  presence  of  false  positive  and  false  negative  errors.  For  discussion 
purposes  we  present  the  results  for  simulation  run  #1  and  run  #3. 

a.  Results  and  Discussions  for  Simulation  Run  1 

For  simulation  run  #1,  a  total  of  21  signals  are  received.  One  false  positive 
error  and  one  false  negative  error  are  encountered  in  this  simulation  run.  The  respective 
times  of  the  signals  and  the  corresponding  sensors  that  produced  them  are  shown  in  Table 
24. 


Table  24.  Simulated  signal  returns  for  run  1  of  pre-screening  test  case  4 


Location  of  sensor 

Detection 

time 

horizon(M) 

1 

10 

14 

17 

33 

38 

41 

45 

50 

56 

63 

68 

84 

87 

91 

100 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

2 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

3 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

4 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

5 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

6 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

7 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

8 

0 

0 

0 

0 

0 

0 

0 

1 

0 

1 

0 

0 

0 

0 

0 

0 

9 

0 

0 

0 

0 

0 

0 

0 

1 

0 

1 

0 

0 

0 

0 

0 

0 

10 

0 

0 

0 

0 

0 

0 

0 

1 

0 

1 

0 

1 

0 

0 

0 

0 

11 

0 

0 

0 

0 

0 

1 

0 

0 

0 

1 

0 

1 

0 

0 

0 

0 

12 

0 

0 

0 

0 

0 

1 

0 

0 

1 

1 

0 

1 

0 

0 

0 

0 

13 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

1 

0 

0 

0 

0 

14 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

1 

0 

0 

0 

0 

15 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

1 

16 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

17 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

18 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

19 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

20 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 
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For  run  #1,  the  probability  map  at  w  =  8,  shows  two  probable  events  of  an 
attaek:  eell  53  at  m  =  6  with  2  ^  0-39,  and  eell  52  at  m  =  5  with  a^2 3  ^  0-43.  Figure  29 
depiets  the  probability  map  at  m  =  8. 

Probability  map  at  u=  8 

100 
90 
80 
70 

■I  60 

ta 
o 

2  50 

o 
td 
C 

<  40 

30 
20 
10 

0  1  2  3  4  5  6  7  8  9  10  11  12  13  13  15 

Attack  time  horizon  t 

Figure  29.  Probability  map  at  u  =  8,  for  simulation  run  #1  of  test  ease  4 

However  at  w  =  9,  the  posterior  probabilities  of  both  events,  an  attaek  at 
eell  53  at  M  =  6  and  eell  52  at  w  =  5,  drop  drastieally.  The  model  returns  only  a  single 
estimate,  an  attaek  at  eell  51  at  w  =  5  with  a  posterior  probability  of  0.72  whieh  erosses 
the  alarm  threshold.  For  the  rest  of  the  simulation,  the  posterior  probability  of  this  eorreet 
estimate  eontinues  to  inerease  and  remain  the  dominant  peak  within  the  probability  maps. 
Figure  30  depicts  the  probability  map  at  w  =  9. 


Attack  at  cell  53  at  u  =  6 
Posterior  probability  =  0.393 


Attack  at  cell  52  at  u  =  5 
Posterior  probability  = 
0.439 
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Figure  30.  Probability  map  at  w  =  9  for  simulation  run  #1  of  test  case  4 


Figure  31  plots  the  values  of  and  max,  ,  for  u 

>  5.  It  can  be  seen  that  the  posterior  probabilities  of  an  attack  at  cell  53  at  w  =  6  and  cell 
52  u  =  5  are  dominant  in  the  probability  map  only  at  the  w  =  8  update.  Thereafter  their 
probabilities  drop  below  the  noise  floor  of  the  model.  The  correct  estimate  of  an  attack  at 
cell  51  at  M  =  5  remains  the  dominant  estimate  during  the  entire  simulation  run. 


■  ♦  ■  Posterior  probability 
of  an  attack  at  cell 
51  at  u=5 

Highest  value  in  the 
probability  map 


Posterior  probability 
of  an  attack  at  cell 
52  at  u=5 


Detection  time  horizon  u 


Figure  31. 


Plot  of  the  values  of  a^2,u-6  ■>  ^52, us  ■> 


ctjj  „_5  and  max, ,  for  w  >  5 
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To  understand  the  transient  spikes  in  the  values  of  0:53  and  ,  we 

observe  from  Table  25  that  at  w  =  8,  ,  and  P^^^  have  large  values  and  similarly 

^5U’  Pif^2  •  Henee  the  signals  given  by  the  sensors  loeated  at  45  and  56  at 

M  =  8  generate  high  posterior  probabilities  for  an  attack  in  these  three  locations. 


Table  25.  Expected  pattern  of  sensor  responses  for  an  attack  at  (i)  cell  51  at  w  =  5  (ii) 

cell  52  at  M  =  5  and  (hi)  cell  53  at  u  =  6 


Attack  at  cell  51  at  w  =  5 

Detection  time  horizon  u 

Sensor 

38 

45 

50 

56 

68 

5 

0.01 

0.01 

0.01 

0.01 

0.01 

6 

0.01 

0.01 

0.01 

0.01 

0.01 

7 

0.01 

0.01 

0.01 

0.01 

0.01 

8 

0.01 

0.6 

0.01 

0.5 

0.01 

9 

0.01 

0.7 

0.01 

0.8 

0.01 

10 

0.01 

0.6 

0.01 

0.9 

0.5 

11 

0.5 

0.01 

0.01 

0.8 

0.7 

12 

0.6 

0.01 

0.6 

0.5 

0.8 

13 

0.5 

0.01 

0.7 

0.01 

0.7 

14 

0.01 

0.01 

0.7 

0.01 

0.5 

15 

0.01 

0.01 

0.7 

0.01 

0.01 

16 

0.01 

0.01 

0.6 

0.01 

0.01 

Attack  at  cell  52  at  w  =  5 

5 

0.01 

0.01 

0.01 

0.01 

0.01 

6 

0.01 

0.01 

0.01 

0.01 

0.01 

7 

0.01 

0.01 

0.01 

0.01 

0.01 

8 

0.01 

0.7 

0.01 

0.7 

0.01 

9 

0.01 

0.01 

0.01 

0.9 

0.5 

10 

0.5 

0.01 

0.01 

0.7 

0.7 

11 

0.5 

0.01 

0.5 

0.01 

0.8 

12 

0.5 

0.01 

0.7 

0.01 

0.7 

13 

0.01 

0.01 

0.7 

0.01 

0.5 

14 

0.01 

0.01 

0.7 

0.01 

0.01 

15 

0.01 

0.01 

0.5 

0.01 

0.01 

16 

0.01 

0.01 

0.01 

0.01 

0.01 
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Deteetion  time  horizon  u 

Attaek  at  eell  53  at  w  =  6 

5 

0.01 

0.01 

0.01 

0.01 

0.01 

6 

0.01 

0.01 

0.01 

0.01 

0.01 

7 

0.01 

0.01 

0.01 

0.01 

0.01 

8 

0.01 

0.5 

0.01 

0.7 

0.01 

9 

0.01 

0.01 

0.01 

1 

0.01 

10 

0.01 

0.01 

0.01 

0.7 

0.6 

11 

0.5 

0.01 

0.5 

0.01 

0.8 

12 

0.01 

0.01 

0.7 

0.01 

0.6 

13 

0.01 

0.01 

0.8 

0.01 

0.01 

14 

0.01 

0.01 

0.7 

0.01 

0.01 

15 

0.01 

0.01 

0.5 

0.01 

0.01 

16 

0.01 

0.01 

0.01 

0.01 

0.01 

At  M  =  9,  once  again  simultaneous  signals  from  the  sensors  in  eell  45  and 
56  are  received,  which  increase  the  posterior  probability  of  an  attack  at  cell  51  at  w  =  5, 
but  reduee  the  posterior  probabilities  of  an  attaek  at  eells  53  and  52  sinee 
P52A  -^52  2  -  0-01  •  addition  no  signal  is  reeeived  from  the  sensor  at  eell  68  for  whieh 

P52A  ^  0-5  •  The  posterior  probability  of  the  eorreet  estimate,  a“j  eontinues  to  inerease 

as  the  simulated  signals  mateh  the  expeeted  response  pattern  of  this  attaek  with  respeet  to 
the  timing  of  the  signals  reeeived  as  well  as  the  sensors  responsible  for  the  signals. 

b.  Results  and  Discussions  for  Simulation  Run  3 

For  simulation  run  3,  a  total  of  20  signals  are  reeeived.  Two  false  positive 
errors  and  two  false  negative  errors  are  eneountered  in  this  simulation  run.  The  respeetive 
times  of  the  signals  and  the  corresponding  sensors  that  produced  them  are  shown  in  Table 
26. 
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Table  26.  Simulated  signal  returns  for  run  #3  of  pre-sereening  test  case  4 


Location  of  sensor 

Detection 

time 

horizon(M) 

1 

10 

14 

17 

33 

38 

41 

45 

50 

56 

63 

68 

84 

87 

91 

100 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

2 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

3 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

4 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

5 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

6 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

7 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

8 

0 

0 

0 

0 

0 

0 

0 

1 

1 

0 

0 

0 

0 

0 

0 

0 

9 

0 

0 

0 

0 

0 

0 

0 

1 

0 

1 

0 

0 

0 

0 

0 

0 

10 

0 

0 

0 

0 

0 

0 

0 

1 

0 

1 

0 

1 

0 

0 

0 

0 

11 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

12 

0 

0 

0 

0 

0 

1 

0 

0 

1 

1 

0 

1 

0 

0 

0 

0 

13 

0 

0 

0 

1 

0 

1 

0 

0 

1 

0 

0 

1 

0 

0 

0 

0 

14 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

15 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

16 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

17 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

18 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

19 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

20 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

For  run  #3,  the  probability  map  at  w  =  9  reveals  an  attack  at  location  43  at 
M  =  6  with  the  value  of  3  =  0.86  which  crosses  the  alarm  threshold.  Figure  32  depicts 
the  probability  map  at  w  =9. 
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Figure  32.  Probability  map  at  m  =  9  for  simulation  run  #3  of  test  case  4 


However  at  w  =  10,  the  value  of  4  drops  drastically  to  0.09.  The  model 

returns  only  a  single  estimate,  an  attack  at  cell  51  at  w  =  5  with  =  0.88  which  crosses 

the  alarm  threshold.  For  the  rest  of  the  simulation,  the  posterior  probability  of  this  correct 
estimate  continues  to  increase  and  remain  the  dominant  peak  within  the  probability  maps. 
Figure  33  depicts  the  probability  map  at  w  =  10. 


Attack  time  horizon  t 


Figure  33.  Probability  map  at  w  =  10,  for  simulation  run  #3  of  test  case  4 
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It  can  be  seen  that  the  posterior  probability  of  an  attack  at  cell  43  at  w  =  6 
crosses  the  threshold  only  for  the  update  at  w  =  10  and  fades  away  thereafter.  The 
posterior  probability  of  an  attack  at  cell  51  at  w  =  5  remains  the  dominant  estimate  for  the 
rest  of  the  detection  time  horizon. 


’■  Posterior  probability  of  an 
attackat  cell  51  at  u-5 

H  ghest  value  in  the 
ptubdbility  map 

— —  Posterior  probability  of  an 
attackat  cell  43  at  u=6 


Figure  34.  Plot  of  the  values  of  «43y_g,  and  max,^a“,  for  u  >  5 

Figure  34  plots  the  values  of  ,  a";  and  max, ,  a,“,  for  w  >  5.  It 
can  be  seen  from  Figure  35  that  the  value  of  0:43  3  rises  above  the  alarm  threshold  to  0.86 

at  w  =  9  due  to  a  false  positive  error  from  sensor  50  and  a  false  negative  error  from  sensor 
56.  Atu=  10,  simultaneous  alarms  are  received  from  the  sensors  placed  at  cell  45,  56  and 
68.  This  increases  the  value  of  «5i„_5  but  decreases  the  value  of  since  at  u  =  10, 

^43^4  =^43^4  =^4^4  =  0.01 .  The  posterlor  probability  of  the  correct  estimate, 

continues  to  increase  as  the  simulated  signals  match  the  expected  response  pattern  of  this 
attack  with  respect  to  timing  of  the  signals  received  as  well  as  the  sensors  responsible  for 
the  signals. 

Hence  false  negatives  in  conjunction  with  false  positives  can  result  in  a 
wrong  estimate  that  is  very  far  in  physical  proximity  from  the  true  attack  location.  To 
overcome  this,  an  additional  requirement  to  trigger  an  alarm  will  be  at  least  three 
consecutive  observations  that  are  above  the  alarm  threshold.  This  added  more  stringent 
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requirement  for  persistency  should  weed  out  transient  spikes  due  to  false  negatives  and 
false  positive  signals  adding  greater  confidence  and  reliability  in  triggering  an  alarm. 

7,  Simulation  Results  for  Test  Case  5,  Attack  at  Location  85 

For  an  attack  at  cell  85,  the  ENCS  is  2  from  two  different  sensors.  The  statistics 
of  the  five  simulation  runs  are  summarized  in  Table  27. 


Table  27.  Simulated  sensor  signals  and  model  outputs  for  pre-screening  test  case  4 


Run  f 

Run  2 

Run  3 

Run  4 

Run  5 

Simulated  signal  returns 

Number  signals  from  sensor 
deployed 

6 

13 

6 

8 

12 

False  positive  errors 

0 

7 

1 

3 

6 

False  negative  errors 

0 

0 

1 

1 

0 

Correct  signals 

6 

6 

4 

5 

6 

Model  outputs 

Estimate  of  attack  location 

Cell  85 

Cell  85 

Cell  85 

Cell  85 

Cell  85 

Estimate  of  time  of  attack 

u  =  5 

u  =  5 

u  =  5 

u  =  5 

u  =  5 

Eocation  error  (meters) 

0 

0 

0 

0 

0 

Time  of  release  error  (mins) 

0 

0 

0 

0 

0 

Time  at  which  alarm  threshold  of 
0.7  is  crossed 

M  =  8 

M  =  8 

M  =  8 

M  =  8 

M  =  8 

Flighest  posterior  for  the  correct 
location  and  time, 

1 

1 

1 

1 

1 

Time  at  which  the  highest  value 
of  the  correct  posterior  is 
observed,  ArgMax^,al^  ^^^ 

u  =  \2 

M=  13 

u  =  \3 

u  =  9 

u=\2 

Presence  of  incorrect  posteriors 
>  alarm  threshold  of  0.7 

No 

No 

No 

No 

No 

Presence  of  incorrect  posteriors 
>  noise  floor  of  0.2 

Yes 

Yes 

Yes 

Yes 

Yes 

Is  ^  ^ 

No 

No 

No 

No 

No 
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For  all  five  simulation  runs,  the  model  is  able  to  estimate  aeeurately  the  attaek 
location  and  time  to  be  cell  85  at  w  =  5.  We  present  only  the  results  for  simulation  run  #1. 
Figure  35  plots  the  values  of  al^  ^^5  and  max, ,  a",  for  w  >5. 


Figure  35.  Plot  of  the  values  of  al^  and  max, ,  a,",  for  w  >5 

From  Figure  35,  it  can  be  seen  that  the  posterior  probability  of  an  attack  at  cell  85 
at  u  =  5  crosses  the  alarm  threshold  at  the  update  at  w  =  8  and  remains  the  sole  dominant 
estimate  for  the  entire  simulation  run. 

8,  Insights  Gained  from  the  Preliminary  Simulation  Trials 

The  preliminary  trials  helped  to  determine  the  alarm  criterion  for  responding  to  an 
attack.  The  alarm  criterion  is  at  least  three  consecutive  instances  of  posterior  probabilities 
that  are  above  the  alarm  threshold  of  0.7.  The  alarm  threshold  is  set  at  0.7  to  avoid 
responding  to  competing  cues  representing  possible  attack  events  early  in  the  update 
process.  The  requirement  for  three  consecutive  observations  eliminates  false  estimates 
caused  by  sudden  spikes  in  the  probability  maps  due  to  false  positive  errors  and/or  false 
negative  errors  that  are  encountered  in  the  operational  environment. 

The  preliminary  trials  also  revealed  that  the  model  requires  signals  from  sensors 
located  in  at  least  two  different  locations  to  resolve  between  competing  cues  representing 
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possible  attack  events  that  are  spatially  and  temporally  close.  This  adds  another  constraint 
on  top  of  other  operational  requirements  in  the  deployment  of  sensors  such  as  early 
warning  and  detection  coverage  of  the  area  of  operations. 

Factors  that  affect  the  model’s  capability  to  accurately  estimate  the  location  and 
time  of  an  attack  are  (i)  the  Expected  Number  of  Correct  Signals  (ENCS)  (ii)  the  number 
of  false  positive  errors  and  (iii)  the  number  of  false  negative  errors. 

Implementing  the  alarm  criterion  stated,  Table  28  summarizes  the  model 
performance  statistic  for  the  preliminary  trials.  If  we  exclude  the  runs  for  an  attack  at 
location  48  where  the  model  is  unable  to  resolve  between  2  competing  events,  the 
percentage  success  will  be  100%  instead. 


Table  28.  Overall  statistics  of  the  preliminary  trials 


Total  number  of  runs 

20 

Average  number  of  false  positives 

2.55 

Average  number  of  false  negatives 

0.7 

Average  number  of  correct  signals 

8.65 

Number  of  runs  with  correct  estimates 

15 

Percentage  success 

75 

Average  time  taken  to  sound  an  alarm  (mins) 

6 

C.  TEST  DESIGN  MATRIX 

Screening  experiments  are  used  to  estimate  the  magnitude  and  direction  of  factor 
effects;  that  is  how  much  does  the  response  variable  change  when  each  factor  is  changed 
(Montgomery,  2009). 

Eactors  that  affect  the  model’s  capability  to  accurately  estimate  the  location  and 
time  of  an  attack  given  a  (i)  sensor  deployment  plan,  (ii)  set  of  meteorological  conditions 
and  (iii)  chemical  attack  quantity  are 

(i)  Expected  Number  of  Correct  Signals  (ENCS) 

(ii)  Number  of  false  positive  errors 
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(iii)  Number  of  false  negative  errors 

The  relationship  between  the  factors  identified  and  the  model  input  parameters  are 
summarized  in  Table  29. 


Table  29.  Relationship  between  the  factors  and  model  input  parameters 


Eactors 

Model  Input  parameters 

1)  ENCS 

Eocation  of  attack 

2)  Number  of  false  positive  errors 

\-q,  false  positive  probability 

3)  Number  of  false  negative  errors 

Sensitivity  of  the  sensor  being  modeled 

To  evaluate  the  model  we  categorize  the  three  factors.  With  respect  to  the  ENCS, 
the  attack  locations  are  divided  into  3  categories,  each  corresponding  to  low,  medium  and 
high  values  of  ENCS,  as  shown  in  Table  30.  In  the  evaluation  trials,  an  attack  location  is 
randomly  selected  from  each  of  the  three  categories.  We  require  however  that  each  attack 
location  is  covered  by  at  least  two  sensors.  This  is  to  ensure  that  the  model  is  able  to 
resolve  between  competing  cues  representing  possible  attack  events  that  are  close  to  each 
other  spatially  and  temporally. 


Table  30.  Categories  of  ENCS 


ENCS  categories 

Eow 

Medium 

High 

ENCS 

less  than  6 

6  to  10 

More  than  10 

Number  of  locations  within  category 

38 

18 

13 

We  consider  two  categories  for  the  error  rates;  high  and  low.  A  low  false  positive 
rate  is  10  errors  in  an  hour  from  all  16  sensors,  which  implies  \-q  =  0.0104.  A  high 
false  positive  rate  is  30  errors  in  an  hour  from  all  16  sensors,  which  implies 
\-q  =  0.03125.  Eor  the  false  negative  errors  we  consider  the  following  two  sensor 
models; 

Model  I,  which  represents  the  current  detection  capabilities,  is 
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z/c  >  30  mg  ! 

if  c>  7.5  mg  /  m^  and  <  30  mg  /  m^ 
if  c>  2  mg  /  m^  and  <  7.5  mg  /  m^ 
if  c>  0.5  mg  /  m^  and  <  2  mg  / 
if  c>  0.125  mg  /  and  <  0.5  mg  /  m^ 
if  c>  0.01  mg  t  m  =  Detection  threshold 
otherwise 

Model  II,  which  represents  an  improved  sensor  is: 

1.0  if  c>  2  mg!  m^ 

0.9  if  c>  0.5  mg  /  m^  and  <  2  mg  /  m^ 

P^fc)  =  <  0.8  if  c>  0.125  mg! m^  and  <  0.5  mg  I m^ 

0.7  if  c  >0.01  mg  !  m^  and  <0.125  mg  !  m^ 

\-q  otherwise 

The  chemical  attack  involves  50kg  of  Sarin,  which  is  a  nerve  agent.  The  alarm 
criterion  is  at  least  three  consecutive  time  periods  in  which  the  posterior  probability  of  a 
certain  entry  in  the  probability  map  is  above  the  alarm  threshold  0.7.  We  recognize  that 
other  alarm  criteria  such  as  two  consecutive  observations  that  are  above  the  alarm 
threshold  of  0.8  may  also  be  applicable.  In  evaluating  the  model,  the  emphasis  is  not  on 
determining  an  optimal  alarm  criterion,  as  this  is  dependent  on  the  risk  attitude  and 
objectives  of  the  decision  maker.  Recall  that  the  MOEs  used  in  evaluating  the  model  are: 

a)  Accurately  identifying  the  attack  location 

b)  Accurately  identifying  the  time  of  attack 

We  design  a  screening  experiment  with  input  factors  (ENCS,  false  positive  errors, 
and  false  negative  errors).  The  experimental  design  matrix,  which  is  a  full  factorial  in  the 
three  factors  defined,  consists  of  300  simulation  trials.  There  are  12  test  cases,  with  25 
replications  per  test  case.  This  matrix  is  shown  in  Table  31.  A  test  case  (or  single 
experiment)  is  defined  by  the  levels  of  ENCS  (three  categories)  and  the  levels  of  false 
positive  and  false  negative  errors  (two  categories  each).  A  full  factorial  will  allow  us  to 
screen  for  all  main  effects  and  two  factor  interactions  in  the  variables  of  interest. 


1 

0.9 

0.8 

P'{c)  =  \o.l 
0.6 
0.5 
l-q 
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Table  31. 


Experimental  design  matrix 


High  ENCS 

Medium  ENCS 

Low  ENCS 

High  false 
positives 

Low  false 
positives 

High  false 
positives 

Low  false 
positives 

High  false 
positives 

Low  false 
positives 

High  false  negatives 

25 

25 

25 

25 

25 

25 

Low  false  negatives 

25 

25 

25 

25 

25 

25 

D.  EVALUATION  AND  DISCUSSION 

In  this  seetion  we  present  the  results  of  the  simulation  runs  for  the  12  test  cases, 
develop  a  linear  regression  model  for  identifying  the  effects  of  the  factors  on  the  MOEs 
and  discuss  the  results  obtained. 

I,  Evaluation  of  Test  Results 

It  is  observed  that  in  most  instances  the  alarm  criterion  successfully  ignores  false 
estimates  caused  by  sudden  spikes  in  the  probability  maps  due  to  false  positive  errors  and 
false  negative  signals.  Ealse  estimates  that  satisfy  the  alarm  criterion  deviate  substantially 
from  the  actual  location  and  time  of  the  attack.  As  the  accuracy  of  both  the  time  and 
location  of  the  attack  is  critical,  a  success  is  only  declared  if  both  MOEs  are  satisfied. 

We  define  success  percentage  as 

_  Number  of  trials  that  ^timated  the  time  and  location  of  attack  accurately  ^ 

~  Total  number  of  trials  within  the  test  category 

and  use  this  measure  for  evaluating  the  results  of  the  simulations.  Note  that  success 
percentage  is  only  defined  on  the  range  0  to  100.  As  a  result  of  this,  it  would  be  ideal  to 
fit  the  response  with  a  logistic  model.  However,  in  this  section,  we  are  concerned  with 
identifying  the  important  factors  and  determining  the  magnitude  and  direction  of  their 
effect  on  the  response,  success  percentage,  rather  than  create  a  fitted  model  to  use  a 
predictor. 

Myers  et  ah,  (2002)  point  out  that  a  factorial  design  can  be  used  to  effectively 
identify  significant  factors  through  a  linear  fit,  even  if  the  response  is  logistic.  The  linear 
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model  should  not  however  be  used  for  making  adequate  predictions.  After  the  significant 
factors  are  identified,  follow  on  experiments  could  be  preformed  and  used  for  fitting  a 
logistic  model. 

The  success  percentage  values  for  the  12  test  cases  are  presented  in  Table  32. 


Table  32.  Success  percentage  for  the  12  test  cases 


High  ENCS 

Medium  ENCS 

Low  ENCS 

High  false 
positives 

Low  false 
positives 

High  false 
positives 

Low  false 
positives 

High  false 
positives 

Low  false 
positives 

High  false  negatives 

68 

88 

52 

72 

24 

44 

Low  false  negatives 

92 

96 

84 

88 

52 

80 

From  Table  32,  it  is  observed  that  the  success  percentage  increases  with  high 
levels  of  ENCS,  decreases  with  high  levels  of  false  positive  errors  and  high  levels  of  false 
negative  errors.  In  the  presence  of  low  false  positive  errors  and  low  false  negative  errors, 
the  success  percentage  is  >  80%.  Next,  we  develop  a  linear  regression  model  to  assess 
the  effect  of  each  one  of  the  three  factors  on  the  success  percentage. 

2,  Linear  Regression  Model 

In  a  screening  experiment,  a  linear  regression  model  is  often  used  to  identify  the 
significant  factors  from  an  experiment.  We  use  a  linear  regression  model  to  investigate 
the  effect  of  the  factors  on  the  success  percentage.  The  full  model  is: 

Y  =  P,+  +  ^23^2^3  + 

where 

Y :  represents  the  success  percentage; 

xp.  represents  false  positive  rates,  -l<Xj<l  in  coded  units,  with  Xj  =  1 
indicating  high  false  positives  rates  and  Xj  =  -  1  low  false  positives  rates; 

Xj :  represents  false  negative  rates,  -1  <  Xj  <  1  in  coded  units,  with  X2  =  1 
indicating  high  false  positives  rates  and  Xj  =  -  1  low  false  positives  rates; 
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X3  :  represents  ENCS,  -1  <  X3  <  1  in  eoded  units,  with  X3  =  1  indieating  high 


ENCS,  X3  =  0  medium  ENCS  and  X3  =  -  1  low  ENCS;  and 

s  :  represents  noise,  taken  to  be  independent  identieally  distributed  Normal 
random  variates. 

The  results  of  the  linear  regression,  fitted  using  Minitab,  indieate  that  only  the 
main  effeets  (ENCS,  false  positive  errors,  false  negative  errors)  are  signilieant  and  no 
two  faetor  interaetions  are  statistieally  signifieant.  The  estimated  linear  model  in  eoded 
units  takes  the  form 

T  =  70- 8xj  -  12X3 +18x3  (8) 

The  eorresponding  statisties  of  the  linear  model  are  shown  in  Table  33  and  the 
normal  probability  plot  of  the  residuals  is  shown  in  Eigure  36. 


Table  33.  Statisties  of  the  linear  model 


Estimator 

value 

Standard  error 

t-statistie 

p-value 

A 

70.000 

2.198 

31.84 

0.000 

A 

-8.000 

2.198 

-3.64 

0.007 

A 

-12.000 

2.198 

-5.46 

0.001 

A 

18.000 

2.693 

6.69 

0.000 
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Normal  Probability  Plot 

(response  is  Percentage  Success) 


Figure  36.  Normal  probability  plot  of  percentage  success  against  residuals 


2 

As  seen  from  Table  33,  the  p-value  of  each  the  regressors  is  less  than  0.05.  The  R 
value  of  the  linear  model  is  91.6%  and  the  R  adjusted  is  88.5%.  The  linear  model 
provides  an  adequate  fit  to  the  data  for  its  intended  purpose  of  identifying  significant 
factors  and  demonstrating  the  magnitude  and  direction  those  effects. 

Other  adequacy  checks  such  as  the  plot  of  residuals  against  the  fitted  value  and 
residual  vs.  run  order  indicate  a  possible  slight  violation  of  the  constant  variance 
assumption.  As  a  result  a  transformation  was  applied  to  the  response  in  order  to  stabilize 
the  variance.  This  transformation  resulted  in  no  changes  in  conclusions  about  the  main 
factor  effects  and  their  magnitude  or  direction. 

3,  Discussion 

Clearly,  the  best  test-case  situation  is  when  the  value  of  ENCS  is  high  and  the 
rates  of  false  positive  and  false  negative  errors  are  low.  The  worst-test  case  situation  is 
when  the  value  of  ENCS  is  low  and  the  rates  of  false  positive  and  false  negative  errors 
are  high.  Eor  the  best-test  case  situation,  success  percentage  is  96%.  Eor  the  worst-test 
case  situation,  success  percentage  is  only  24%. 
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From  the  linear  regression  model,  it  is  found  that  with  all  other  faetors  held  at 
their  nominal  levels  the  success  percentage  (i)  inereases  by  18%  when  the  ENCS  is 
inereased  from  low  levels  of  ENCS  to  high  levels  of  ENCS,  (ii)  deereases  by  8%  when 
false  positive  rate  is  tripled  from  0.0104  to  0.03125  and  (ill)  deereases  by  12%  when  the 
false  negative  rate  is  doubled  from  0.0045  to  0.009.  Erom  the  regression  equation  in  (8), 
we  observe  that  the  dominant  faetor  is  the  ENCS  with  the  highest  eoefficient  value  of  18. 
As  a  result,  in  sensor  placement,  considerations  should  be  made  to  increase  the  ENCS  for 
sensors  in  the  area  of  operations.  We  also  observe  that  the  false  negative  errors  have  a 
higher  impact  on  the  success  percentage  than  the  false  positive  errors. 

Note  that  placing  all  of  the  factors  at  their  high  levels  results  in  a  greater  than  100 
percent  success  rate  based  on  the  fitted  modeling  in  equation  (8).  This  result  is  clearly 
impossible.  While  the  fitted  linear  model  was  able  to  provide  insight  as  to  the  main 
effects  and  their  relative  importance,  follow  on  experiments  and  the  use  of  a  fitted 
logistic  model  would  be  needed  to  make  more  precise  predictions. 

E,  INSIGHTS  ON  SENSOR  COVERAGE 

The  values  derived  from  the  output  of  the  physical  and  sensor  model  give  the 

probability  that  a  sensor  located  at  location  s  will  detect  a  chemical  attack  at  location  /,  t 
time  periods  ago.  These  values  also  give  the  coverage  of  a  given  sensor  deployment 
plan.. 

Eigure  37  shows  the  coverage  of  the  sensor  deployment  plan  used  in  the  large 
scale  setting  for  a  50kg  nerve  agent  attack  with  a  wind  speed  of  1.67m/s  blowing  to  the 
east.  The  lightly  shaded  area  cells  contain  sensors  while  the  darkly  shaded  area  cells 
indicate  attack  locations  not  covered  by  the  set  of  deployed  sensors. 
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Figure  37.  Sensor  coverage  for  a  50kg  nerve  agent  attack 

From  Figure  37,  it  can  be  seen  that  an  attack  originating  in  any  of  the  18  darkly 
shaded  area  cells  will  not  be  detected  by  any  of  the  sensors  in  the  current  deployment 
plan,  given  the  meteorological  conditions.  A  plume  originating  in  these  cells  will  drift 
eastward  without  encountering  any  sensors. 

We  take  it  a  step  further  to  give  a  coverage  index  to  each  area  cell.  This  index,  , 

is  the  probability  that  an  attack  in  cell  /  is  correctly  detected  by  at  least  one  sensor. 
Assuming  stationary  detection  capability  of  the  sensors  and  independence  between  sensor 
signals,  Pi  is  calculated  as  follows: 

A =1-0(1-^:.)  w 

(,s 
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The  value  of  yS',  inereases  with  the  ENCS  since  the  product  term  in  Equation  9  is 
dependent  on  the  ENCS.  Hence  area  cells  that  have  a  high  value  of  ENCS  also  have  a 
high  value  of  (3^ . 

Eigure  38  shows  the  values  of  the  coverage  index  of  the  sensor  deployment  plan 
used  in  the  large  scale  setting  for  a  50kg  nerve  agent  attack  with  a  wind  speed  of  1.67m/s 
in  the  eastern  direction.  The  lightly  shaded  area  cells  contain  sensors. 

Erom  Eigure  38,  the  coverage  index  informs  decision  makers  and  planners  on  the 
probability  of  detecting  a  chemical  attack  relative  to  a  sensor  deployment  plan.  With  the 
coverage  index,  vulnerable  locations  (locations  with  low  probability  of  detection)  as  well 
as  locations  with  no  coverage  are  identified. 

Chemical  sensors  placed  downwind  of  the  area  of  operations  give  better  coverage 
at  the  expense  of  delayed  warning.  This  is  a  tradeoff  that  decision  makers  have  to  make 
in  sensor  placement.  The  detection  of  a  chemical  attack  depends  on  the  location,  quantity 
and  type  of  chemical  agent  used  as  well  as  the  prevailing  meteorological  conditions 
relative  to  the  sensor  deployment  plan  and  the  detection  performance  of  the  sensors.  The 
Pi\  values  offer  an  important  tool  to  provide  decision  makers  information  on  the 

coverage  of  a  sensor  deployment  plan.  The  coverage  index  allows  decision  makers  and 
planners  to  identify  both  vulnerable  areas  and  areas  with  no  sensor  coverage.  This  allows 
gaps  to  be  identified  and  improvements  to  be  made  by  adding  sensors  or  redeploying 
forward  sensors  downwind  at  the  expense  of  late  warning. 
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Figure  38.  Values  of  the  coverage  index  for  a  50kg  nerve  agent  attack  by  cell  location 
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VI.  SUMMARY  AND  CONCLUSIONS 


A  Bayesian  updating  model  is  used  to  detect  a  chemical  attack,  determine  its 
location  /  and  estimate  the  time  of  the  attack  t.  The  model  uses  data  obtained  from 
sensors  deployed  in  the  area  of  operations  monitoring  the  air  for  a  possible  chemical 
attack.  The  detection  model  is  made  up  of  3  modules:  (i)  a  physical  model;  (ii)  a  sensor 
model;  and  (hi)  a  Bayesian  updating  model. 

The  physical  model  serves  to  calculate  the  chemical  concentration  c  at  the 
location  of  sensor  s  due  to  an  attack  at  location  I,  t  time  periods  ago.  Based  on  the  output 
c  of  the  physical  model,  the  sensor  model  computes  the  probabilities,  .  The  Bayesian 

updating  model  calculates  the  probability  map  at  time  period  u,  ,  of  the  posterior 
probability  of  a  chemical  attack  at  location  /,  t  time  period  ago  after  the  observations 
obtained  by  the  sensors  at  time  u.  High  value  of  at  time  period  u  ,  indicates  that  there 
is  a  strong  likelihood  that  a  chemical  attack  has  occurred  at  location  /,  t  time  periods  ago. 

The  model  is  evaluated  with  respect  to  settings  representing  real-world 
operations.  The  selected  alarm  criterion  by  which  decision  makers  initiate  a  response  is  at 
least  three  consecutive  instances  of  posterior  probabilities  of  an  attack  at  location  I,  t  time 
periods  ago  that  is  above  the  alarm  threshold  of  0.7.  The  alarm  threshold  is  set  at  0.7  to 
avoid  responding  to  competing  cues  representing  possible  attack  events  early  in  the 
update  process.  The  requirement  for  three  consecutive  observations  eliminates  false 
estimates  caused  by  sudden  spikes  in  the  probability  maps  due  to  false  positive  errors 
and/or  false  negative  errors  that  are  encountered  in  the  operational  environment. 

Factors  that  affect  the  model’s  capability  to  accurately  estimate  the  location  and 
time  of  an  attack  are  (i)  the  specific  layout  of  the  deployed  sensors  relative  to  the  attack 
location;  (ii)  the  number  of  false  positive  errors;  and  (iii)  the  number  of  false  negative 
errors. 

From  the  linear  regression  model,  it  is  found  that,  of  the  factors  studied,  the 
dominant  factor  is  the  ENCS,  which  depends  on  the  specific  layout  of  the  deployed 
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sensors  relative  to  the  attack  location.  As  a  result,  in  sensor  placement,  considerations 
should  be  made  to  increase  the  ENCS  for  sensors  in  the  area  of  operations.  In  the  battle 
between  sensitivity  and  specificity  of  the  sensors  deployed,  it  is  more  worthwhile  to 
invest  in  sensitivity.  This  is  because  false  negative  rates  are  found  to  affect  the  model 
performance  to  a  greater  extent. 

In  conclusion,  we  have  demonstrated  that  the  model  developed  is  able,  in  many 
cases,  to  accurately  identify  the  location  and  time  of  a  chemical  attack  with  a  nominal 
attack  quantity  of  50kg  using  inputs  from  chemical  sensors  and  ATD  models.  The  model 
bridges  a  critical  gap  between  raw  sensor  data  and  threat  evaluation  and  prediction 
models,  giving  authorities  the  capability  to  perform  better  hazard  detection  and  damage 
control. 

Insights  on  sensor  coverage  were  also  obtained.  By  using  the  values  of  all  the 
point  sensors  deployed,  the  coverage  of  the  sensors  for  a  given  chemical  attack  quantity 
and  set  of  meteorological  conditions  can  be  ascertained.  The  values  offer  an 

important  tool  to  provide  decision  makers  information  on  the  coverage  of  a  sensor 
deployment  plan.  A  coverage  index  indicating  the  probability  of  detecting  a  chemical 
attack  relative  to  a  sensor  deployment  plan  was  also  developed.  The  coverage  index 
allows  decision  makers  and  planners  to  identify  both  vulnerable  areas  and  areas  with  no 
sensor  coverage.  This  allows  coverage  gaps  to  be  identified  and  improvements  to  be 
made  by  the  addition  of  sensors  or  redeploying  forward  sensors  downwind  at  the  expense 
of  early  warning. 

Future  research  involves  extending  the  model  to  (i)  detect  chemical  attacks  with 
different  nominal  attack  quantity  levels,  (ii)  detect  multiple  chemical  attacks  and  (hi) 
incorporate  different  sensor  types.  The  insights  obtained  on  sensor  coverage  through  the 
use  of  the  values  in  the  model  motivate  further  research  in  the  area  of  sensor 
deployment  and  optimization. 
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APPENDIX 


A.  VALUES  OF  ALL  16  SENSORS  FOR  A  NERVE  AGENT  ATTACK 

Table  34.  values  for  sensor  in  eell  1 


,1  Attack  time  scale,  t  time  steps  since  the  occurrence  of  the  chemical  attack 


Location 

0 

1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

1 

1.00 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

2 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

100 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

Table  35.  values  for  sensor  in  eell  10 


pio 

Attack  time  scale,  t  time  steps  since  the  occurrence  of  the  chemical  attack 

Location 

0 

1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

1 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.50 

0.60 

0.70 

0.80 

0.70 

0.60 

0.50 

0.01 

0.01 

0.01 

2 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.60 

0.70 

0.80 

0.70 

0.60 

0.01 

0.01 

0.01 

0.01 

0.01 

3 

0.01 

0.01 

0.01 

0.01 

0.01 

0.60 

0.80 

0.80 

0.80 

0.60 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

4 

0.01 

0.01 

0.01 

0.01 

0.50 

0.80 

0.80 

0.80 

0.50 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

5 

0.01 

0.01 

0.01 

0.50 

0.80 

0.90 

0.80 

0.50 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

6 

0.01 

0.01 

0.01 

0.70 

0.90 

0.70 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

7 

0.01 

0.01 

0.70 

1.00 

0.70 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

8 

0.01 

0.50 

1.00 

0.50 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

9 

0.01 

1.00 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

10 

1.00 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

11 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.60 

0.70 

0.70 

0.70 

0.60 

0.01 

0.01 

0.01 

0.01 

12 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.50 

0.70 

0.70 

0.70 

0.50 

0.01 

0.01 

0.01 

0.01 

0.01 

13 

0.01 

0.01 

0.01 

0.01 

0.01 

0.50 

0.70 

0.80 

0.70 

0.50 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

14 

0.01 

0.01 

0.01 

0.01 

0.50 

0.70 

0.80 

0.70 

0.50 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

15 

0.01 

0.01 

0.01 

0.01 

0.60 

0.80 

0.60 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

16 

0.01 

0.01 

0.01 

0.60 

0.70 

0.60 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

17 

0.01 

0.01 

0.01 

0.70 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

18 

0.01 

0.01 

0.50 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 

0.01 
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